vlife vulnerabilities

1 known vulnerability in vlife from Wwwlike. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  vlife: Use of Hard-coded Cryptographic Key

  CVE-2026-110612Oct 14, 2026Wwwlike

  vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain sup