Skip to content
Threat Feed
Subscribe

Vendor

INDOTALENT

1 brief RSS
critical advisory

INDOTALENT Asp.Net-Core-Inventory-Order-Management-System authentication bypass (CVE-2026-125383)

INDOTALENT WHMS versions before 10.20261109 contain an authentication bypass vulnerability via hard-coded JWT secrets in appsettings.json, allowing remote unauthenticated attackers to forge administrative tokens.

Asp.Net-Core-Inventory-Order-Management-System
1t 1c