CVE-2026-108336 - Token Signing Key Allows Unauthenticated Administrative Access
CVE ID :CVE-2026-108336 Published : Oct. 14, 2026, 10:17 p.m. | 1 hour, 15 minutes ago Description :When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens...