https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 17:59:08 +0000 https://db.gcve.eu/vuln/cve-2026-119660 <p><strong>Affected:</strong> yincongcyincong MuseBot</p> <p>MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key &#39;muse_bot_session_key&#39;. Attackers can sign a MuseBot-session cookie carrying a user_id to gain full administrative access, reading password hashes, chat records, and bot configuration, and stopping bots.</p> <p><strong>Affected:</strong> yincongcyincong MuseBot</p> <p>MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key &#39;muse_bot_session_key&#39;. Attackers can sign a MuseBot-session cookie carrying a user_id to gain full administrative access, reading password hashes, chat records, and bot configuration, and stopping bots.</p> https://db.gcve.eu/vuln/cve-2026-119660