Skip to content
Threat Feed
Subscribe

Vendor

Rote

2 briefs RSS
high advisory

Rote: Privilege Escalation via JWT Secret Exposure (CVE-2026-126803)

Rote versions up to 2.6.0 contain a privilege escalation vulnerability that allows an authenticated administrator to forge JWT tokens by accessing the application's signing secret via the settings API.

Rote cve-2026-126803 privilege-escalation web-application-vulnerability
1r 2t 1c
high advisory

Rote: Authorization bypass in OAuth bind/merge endpoint (CVE-2026-126801)

Rote versions 1.2.0 through 2.6.0 are vulnerable to an authorization bypass in the OAuth bind/merge endpoint that allows authenticated attackers to hijack, manipulate, and delete arbitrary user accounts.

Rote
1t 1c