ZeroHour

CVE-2026-0622

CVSS 3.1
6.5 medium
EPSS
<1%p37
Published
()
Modified
Description

Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset

Vendors
open5gs
Products
open5gs
Weakness
CWE-798
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.