CVE ID :CVE-2026-56265 Published : June 21, 2026, 1:26 p.m. | 1 hour, 43 minutes ago Description :Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56265 - Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

VERWANDTEARTIKEL

CVE-2026-56397 - SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

CVE-2026-56396 - phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()

CVE-2026-56382 - Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsController

CVE-2026-56253 - Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPC

CVE-2026-56242 - Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPC

CVE-2025-71378 - picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files