https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T07:14:38.126744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214213 EUVD-2026-214213 2026-10-13T07:14:38.129222+00:00 EUVD-2026-214213 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53356 fkie_cve-2024-53356 2026-10-13T07:14:38.129252+00:00

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.

 https://cve.radiocsirt.org/vuln/ghsa-5pcx-4fpr-p436 GHSA-5pcx-4fpr-p436 2026-10-13T07:14:38.129299+00:00

EasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0 are vulnerable to privilege escalation as the password token suffers from weak encryption making it possible to brute-force the password token.