SeriaWei CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH SeriaWei CVE published 2026-10-16

CVE-2026-111633

CVE-2026-111633 is an authentication bypass vulnerability in ZKEACMS through version 4.4. The vulnerability allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. This could lead to unauthorized access to sensitive data, modification of articles and products, and reading of form submissions. Defenders should assess exposure [truncated]