Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 04:51:08 +0000 CVE-2025-14261 — Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges https://cve.radiocsirt.org/vuln/cve-2025-14261 <p><strong>Affected:</strong> Litmuschaos litmus</p> <p>The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.</p> <p><strong>Affected:</strong> Litmuschaos litmus</p> <p>The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.</p> https://cve.radiocsirt.org/vuln/cve-2025-14261