CVE-2026-121926

A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.addInterceptors of the component Web Management API. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-287
• CWE-306

• https://gist.github.com/janceye26-svg/eddbfcd42bbd90613dddcb7965408bf9
• https://vuldb.com/cve/CVE-2026-121926
• https://vuldb.com/submit/1023350
• https://vuldb.com/vuln/431035
• https://vuldb.com/vuln/431035/cti

Published

Nov 4, 2026

Last Modified

Nov 4, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12189A flaw has been found in Moovit Bus & Public Transit App 1.1…5.3
• CVE-2026-1219The MP3 Audio Player – Music Player, Podcast Player & Radio …5.3
• CVE-2026-12190A vulnerability has been found in Genspark AI Workspace App …5.3
• CVE-2026-12191A vulnerability was found in Comma AI Openpilot 0.11. This i…7.8
• CVE-2026-12192A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted…8.8
• CVE-2026-121925A stack-based buffer overflow in libsnowflakeclient and the …6.6
• CVE-2026-121927A vulnerability has been found in InfiniFlow RAGFlow up to 0…6.3
• CVE-2026-121928A vulnerability was identified in InfiniFlow RAGFlow up to 0…3.5
• CVE-2026-121929A security flaw has been discovered in EmpireSoft EmpireCMS …3.5
• CVE-2026-12193A vulnerability was identified in VS Revo RevoUninstaller 2.…7.8
• CVE-2026-121930A weakness has been identified in Linksys WRT54GL 4.30.18. T…9.1
• CVE-2026-121931A security vulnerability has been detected in Linksys WRT54G…9.1