{"metadata": {"vulnerability": "CVE-2026-110612", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110612", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T13:07:24.212Z", "date_only": false, "value": "2026-10-14T13:07:24.212Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110612", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:16:52.666Z", "date_only": false, "value": "2026-10-14T14:16:52.666Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110612", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:16:52.666Z", "date_only": false, "value": "2026-10-14T14:16:52.666Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-110612", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:13Z", "date_only": false, "value": "2026-10-14T15:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V9CF-GM8V-MP4M", "record": "GHSA-V9CF-GM8V-MP4M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:17:13.187Z", "date_only": false, "value": "2026-10-14T15:17:13.187", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110612", "record": "FKIE_CVE-2026-110612", "field": "published"}, {"timestamp": "2026-10-14T15:30:06.559Z", "date_only": false, "value": "2026-10-14T15:30:06.559584Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtuhkg6562l", "record": "CVE-2026-110612", "field": "creation_timestamp", "uuid": "07f64897-8a35-44da-a8e8-5115c86d5c9c", "content": "CVE-2026-110612 - vlife\nVersions of vlife up to 2.0.1 contain a hard\u2011coded signing key that lets anyone create a valid login token. An attacker could craft a token that claims super\u2011user rights and then access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vlife #wwwlike #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtuhkg6562l"}, {"timestamp": "2026-10-14T15:32:25Z", "date_only": false, "value": "2026-10-14T15:32:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V9CF-GM8V-MP4M", "record": "GHSA-V9CF-GM8V-MP4M", "field": "published"}, {"timestamp": "2026-10-14T15:32:25Z", "date_only": false, "value": "2026-10-14T15:32:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V9CF-GM8V-MP4M", "record": "GHSA-V9CF-GM8V-MP4M", "field": "modified"}, {"timestamp": "2026-10-14T16:08:04.031Z", "date_only": false, "value": "2026-10-14T16:08:04.031532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwlghm472o", "record": "CVE-2026-110612", "field": "creation_timestamp", "uuid": "018e6054-1753-46b1-8967-743b08f632f4", "content": "\ud83d\udea8 CVE-2026-110612 \u2014 CVSS 9.3 CRITICAL\n\nvlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-110612\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwlghm472o"}, {"timestamp": "2026-10-14T18:03:43.850Z", "date_only": false, "value": "2026-10-14T18:03:43.850224Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110612", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T18:03:43.850Z", "date_only": false, "value": "2026-10-14T18:03:43.850224Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110612", "record": "FKIE_CVE-2026-110612", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T18:04:15.576Z", "date_only": false, "value": "2026-10-14T18:04:15.576Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110612", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:04:15.576Z", "date_only": false, "value": "2026-10-14T18:04:15.576Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110612", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:17:34.803Z", "date_only": false, "value": "2026-10-14T18:17:34.803", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110612", "record": "FKIE_CVE-2026-110612", "field": "lastModified"}, {"timestamp": "2026-10-14T19:23:18.752Z", "date_only": false, "value": "2026-10-14T19:23:18.752081Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440891997827645", "record": "CVE-2026-110612", "field": "creation_timestamp", "uuid": "f6eb0018-09b4-4f4a-b84c-132ad7f85eec", "content": "CVE-2026-110612 vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vlife instances.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110612https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/vlife-hardcoded-jwt-secret-token-forgeryhttps://github.com/wwwlike/vlife/blob/4f03b19b91d82781939653f5b0d9a70721734d6d/vlife-boot-starter-web/src/main/java/cn/wwwlike/web/security/filter/TokenUtil.java#L33-L58https://github.com/wwwlike/vlife/blob/4f03b19b91d82781939653f5b0d9a70721734d6d/vlife-base/src/main/java/cn/wwwlike/config/VlifeUrlDecisionManager.java#L25https://github.com/wwwlike/vlifehttps://www.vulncheck.com/advisories/vlife-through-2.0.1-authentication-bypass-via-hardcoded-jwt-secret-in-tokenutil#wwwlike #vlife#CVE_2026_110612#bot", "url": "https://infosec.exchange/users/cve/statuses/117440891997827645"}]}