Skip to content
Threat Feed
Subscribe

Vendor

DataBuff

1 brief RSS
critical advisory

Authentication Bypass via Hardcoded HMAC Secret in DataBuff ai-apm-web

An unauthenticated authentication bypass vulnerability (CVE-2026-111692) in DataBuff ai-apm-web allows attackers to forge administrative session tokens using a hardcoded HMAC secret.

ai-apm-web authentication-bypass jwt web-application cve-2026-111692 credential-access api-security
1r 3t 1c