CVE-2026-77130 in SYSSY Extension
Tóm tắt
Bởi MITRE • 25/08/2026
The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.