Skip to content

CVE-2026-126803

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 12, 2026
Last Seen
November 12, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A privilege escalation vulnerability, CVE-2026-126803, has been identified in Rote version 2.6.0, allowing authenticated administrators to gain super_admin rights by accessing JWT signing secrets through the admin settings API. This flaw enables attackers with admin access to forge HS256 tokens, pot...

Public Exploits

Checking GitHub for proof-of-concept code…