JWT

Everything Patch Gazette has reported about JWT: 2 stories, newest first. Part of our Vulnerabilities coverage.

vlife 2.0.1 TokenUtil Hardcoded HS256 Key Enables Critical 9.3 CVSS JWT Forgery and Full Control

A critical flaw in vlife through version 2.0.1 allows attackers to forge tokens and seize full administrative control without valid credentials.

Oct 15, 2026

Vulnerabilities

Default Certs in Hitachi Remot Ops Agent v2.0 Enable Critical CVE-2026-108336 Admin Takeover

A critical flaw in Hitachi Vantara Remot Ops Agent allows attackers to forge login tokens if default certificates remain in place, granting administrative control.

Oct 15, 2026