Lybbn vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lybbn products: 1 record(s), with severity, exploitation and fixes.

Django-Vue-Lyadmin 1

Exploited only (KEV) →

CVE-2026-105392 High · 7.3 CWE-320 Oct 5, 2026

Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRET_KEY leads to use of hard-coded cryptographic key . Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project maintainer explains: "The issue with this key is described in the documentation. Developers need to manually change their keys before deployment."