CVE ID :CVE-2026-57172 Published : July 7, 2026, 9:17 p.m. | 1 hour, 57 minutes ago Description :DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, ShareSecretManage uses a hardcoded default share link signature key, allowing an attacker who can obtain a...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-57172 - DataEase: Hardcoded JWT Signing Secret in ShareLink

VERWANDTEARTIKEL

CVE-2026-59706 - mem0 - Server-Side Request Forgery and Plaintext API Key Exposure via Unauthenticated Config Endpoints

CVE-2026-55408 - Koodo Reader: Remote code execution via malicious epub file

CVE-2026-55418 - FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)

CVE-2026-42958 - Use After Free in Labcenter Proteus

CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

CVE-2026-49033 - Stack-Based Buffer Overflow in Labcenter Proteus