xianhc

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

xianhc records in CISA KEV

No xianhc vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83834 CVE-2026-120442 · GHSA-c4wp-cj2h-5rj2

Hardcoded JWT signing key in ape-volo-admin allows admin token forgery

MEDIUM 51

ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key in appsettings.json.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01707 Published 2026-11-02 Fixed in 3.6.1 CWE-1394

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0