https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:02:23.280872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365684 EUVD-2026-365684 2026-10-09T05:02:23.284541+00:00 EUVD-2026-365684 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79575 fkie_cve-2026-79575 2026-10-09T05:02:23.284598+00:00

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack.

 https://cve.radiocsirt.org/vuln/ghsa-3464-x248-vrcx GHSA-3464-x248-vrcx 2026-10-09T05:02:23.284646+00:00

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack.