CVE-2025-69971 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. The application uses a hard-coded secret key to sign and verify JWT Toke…
Critical CVSS: 9.8

CVE-2025-69971

FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. The application uses a hard-coded secret key to sign and verify JWT Tokens. This allows remote attackers to forge valid admin tokens and bypass authentication to gain full administrative access.
Vendor
Frangoteam
Product
Fuxa
CWE
CWE-798
Yayın Tarihi
2026-02-03 18:16:17
Güncelleme
2026-02-28 04:16:17
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-798 Fuxa CRITICAL Frangoteam 2026

Referanslar

https://github.com/frangoteam/FUXA/blob/master/server/api/jwt-helper.js