CVE-2025-69971 - FUXA Hard-Coded JWT Secret Key Vulnerability

CVE ID : CVE-2025-69971 Published : Feb. 3, 2026, 6:16 p.m. | 41 minutes ago Description : FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js. The application uses a hard-coded secret key to sign and verify JWT Tokens. This allows remote attackers to forge valid admin tokens and bypass authentication to gain full administrative access. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...