rajnandan1 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL rajnandan1 CVE published 2026-10-26

CVE-2026-116747

CVE-2026-116747 is a critical authentication bypass vulnerability in Kener versions 3.0.0 before 4.1.10. Attackers can forge session tokens using a hardcoded fallback JWT secret, allowing unauthorized access to administrative interfaces. This vulnerability exists due to the use of a hardcoded DUMMY_SECRET fallback key when the KENER_SECRET_KEY is empty or unset. Attackers knowing an administrator email ca [truncated]