https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-01T22:47:39.358584+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-118690 fkie_cve-2026-118690 2026-11-01T22:47:39.360052+00:00

Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator tokens, and create persistent admin accounts for full server control.

 https://db.gcve.eu/vuln/ghsa-4r6j-f6gv-fqcx GHSA-4r6j-f6gv-fqcx 2026-11-01T22:47:39.360128+00:00

Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator tokens, and create persistent admin accounts for full server control.