CVE ID :CVE-2026-114087 Published : Oct. 21, 2026, 1:17 a.m. | 49 minutes ago Description :Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC_LINK_SECRET lets anyone...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-114087 - Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets

VERWANDTEARTIKEL

Exposure Management im Zeitalter der Frontier-KI: Warum Geschwindigkeit zum Sicherheitsfaktor wird

CVE-2026-82814 - Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection

CVE-2026-114117 - Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches

CVE-2026-114119 - Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential

CVE-2026-114197 - Deserialization of untrusted data in capa

CVE-2026-114198 - Deserialization of untrusted data in floss