wwwlike

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

wwwlike records in CISA KEV

No wwwlike vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74106 CVE-2026-110612 · GHSA-v9cf-gm8v-mp4m

vlife Authentication Bypass via Hardcoded JWT Signing Key in TokenUtil

HIGH 81

vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00995 Published 2026-10-14 No fix listed CWE-321

TI-2025-12130 CVE-2025-13266 · GHSA-cg6m-9276-qpjj

wwwlike vlife VLifeApi SysFileApi.java create path traversal

HIGH 70

A security vulnerability has been detected in wwwlike vlife up to 2.0.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00642 Published 2025-11-17 No fix listed CWE-22

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0