CyberSecBulletin

StratonWebDesigners vulnerabilities

We track 1 vulnerability in StratonWebDesigners products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.

1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score

Latest StratonWebDesigners vulnerabilities

  • 10.0 Critical severity

    HireFlow: Use of Hard-coded Credentials

    CVE-2026-45336StratonWebDesigners

    HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key used to sign session cookies, allowing unauthenticated attackers