JWT

Everything TechSec Headlines has reported about JWT: 2 stories, newest first. Part of our Vulnerabilities coverage.

11 Oct
Vulnerabilities

Agnaistic Agnai Hardcoded Credentials in Docker Config Grant Remote Admin Control via CVE-2026-108753

A critical flaw in Agnaistic Agnai versions through 1.0.555 exposes fixed admin passwords and JWT secrets, enabling remote attackers to seize full control.

11 Oct
Vulnerabilities

BotSharp Critical Flaw: Config Secret Enables Token Forgery for Admin Impersonation in 5.2.0

A critical flaw in BotSharp allows attackers to forge admin tokens using a secret key stored in the application's configuration file.