← Database

CVE-2026-75431

CRITICAL CVSS: 9.1 Published: 2026-09-04 Modified: 2026-09-08

Description

PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code.

Affected Platforms

Unknown

Weakness Type

CWE-321

References