Xianhc vulnerabilities
We track 1 vulnerability in Xianhc products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Xianhc vulnerabilities
- 9.8 Critical severity
ape-volo-admin: Use of Default Cryptographic Key
ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key in appsettings.json. Attackers can sign tokens offline with the jti claim set to t