Not on CISA's list of exploited flaws, and not in the news we track.
0.83%
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-125383. Nothing runs until you send it.
INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tokens for any user ID and role that the Tokens/DI.cs validator trusts, gaining administrator access to the entire API.