Jwt-Forgery

Nezha Dashboard Path Traversal → JWT Secret Leak → Token Forgery — CVE-2026-53519 newCVE-2026-53519webINFOPatched2026-07-05n8n Unauthenticated Arbitrary File Read to RCE Full Chain — CVE-2026-21858 + CVE-2025-68613 new EPSS 78%CVE-2026-21858, CVE-2025-68613webCRITICAL 10Patched2026-07-05HAXcms Node.js Private Key Disclosure via Broken HMAC (CVE-2026-46395) newCVE-2026-46395webCRITICAL 9.8Patched2026-07-05