Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: rajnandan1 Clear all filters
TI-2026-80956 CVE-2026-116747 · GHSA-7973-f655-53vh

Authentication bypass in Kener via hardcoded fallback JWT secret

Priority MEDIUM 43

Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallback key.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00623 Published 2026-10-26 Fixed in 4.1.10 CWE-321
TI-2026-67392 CVE-2026-105030 · GHSA-9wr3-32qm-xqr7

Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API

Priority LOW 36

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00331 Published 2026-10-02 Fixed in 4.1.6 CWE-200