TI-2026-75476 CVE-2026-111690 · GHSA-m87p-c3h7-7hr8
Simple Admin Core hard-coded JWT secret allows authentication bypass
Priority HIGH 81
Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml.