Tag

Cve-2026-111692

1 brief RSS

Authentication Bypass via Hardcoded HMAC Secret in DataBuff ai-apm-web

An unauthenticated authentication bypass vulnerability (CVE-2026-111692) in DataBuff ai-apm-web allows attackers to forge administrative session tokens using a hardcoded HMAC secret.

ai-apm-web authentication-bypass jwt web-application cve-2026-111692 credential-access api-security

1r 3t 1c 1h ago