World Wires · story 50614 · official · 1 source(s)

CVE-2026-111692: DataBuff ai-apm-web token forgery vulnerability

DataBuff ai-apm-web contains an authentication bypass vulnerability via hardcoded HMAC secrets allowing forged admin session tokens.

Open in the desk

Coverage

• CVE-2026-111693: DataBuff ai-apm-web default credentials flaw NVD: critical CVEs · tier A · clear net · 2026-10-16 18:17 UTC
• CVE-2026-111692: DataBuff ai-apm-web token forgery vulnerability NVD: critical CVEs · tier A · clear net · 2026-10-16 18:17 UTC

What this site indexes