CVE-2026-97877Proof of concept (PoC) published · CISASuited to automated attack · CISA
zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
CVSS score
6.9
EPSS probability
%0.5
Risk score
0.0
Published
17 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.9
CVE-2026-97879
zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication
Z
Patch status unknownEPSS %1
6.9
CVE-2026-97878
zhistaredu StarTraining Druid Console index.html anonymous missing authentication
Z
Patch status unknownEPSS %1
5.3
CVE-2026-100878
zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization
Z
Patch status unknownEPSS %0
5.3
CVE-2026-100879
zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization
Z
Patch status unknownEPSS %0
5.1
CVE-2026-100880
zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting
Z
Patch status unknownEPSS %0
2.1
CVE-2026-100881
zhistaredu StarTraining application.yml cross site scripting
Z
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-97877"