💣Exploit CVE-2025-26340 - Q-Free MaxTime Hard-coded Cryptographic Key Disclosure

[Mental_Outlaw]

CVE ID : CVE-2025-26340
Published : Feb. 12, 2025, 2:15 p.m. | 1 hour, 29 minutes ago
Description : A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.