CVE-2026-121926

HIGH 7.3

yezhihao jt808-server Web Management API WebMvcConfig.addInterceptors missing authentication

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.addInterceptors of the component Web Management API. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-306 CWE-287
Vendor	yezhihao
Product	jt808-server
Published	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for yezhihao jt808-server

Be the first to know when new high vulnerabilities affecting yezhihao jt808-server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

yezhihao / jt808-server

a07f68c466b560b97ef41edb8a4966469abdf83e

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/431035 vuldb.com: https://vuldb.com/vuln/431035/cti vuldb.com: https://vuldb.com/cve/CVE-2026-121926 vuldb.com: https://vuldb.com/submit/1023350 gist.github.com: https://gist.github.com/janceye26-svg/eddbfcd42bbd90613dddcb7965408bf9

Credits

🔍 jance (VulDB User) VulDB CNA Team