Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instance using the victim’s configured upstream provider API credentials, resulting in unauthorized API usage and potential disclosure of proxied request and response data. This vulnerability's general exploitability has been mitigated with the introduction of commit 023cc95.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-09 | 2 | Disclosure1General1 |
| 2026-03-10 | 1 | Disclosure1 |
CVE-2026-29023 Authentication Bypass in Keygraph Shannon Router via Hard-Coded API Key https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29023
Post summary
This entry reports an authentication bypass vulnerability in Keygraph Shannon Router due to a hard‑coded API key, and links to the vulnerability details page.
CVE-2026-29023 Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authent… https://www.cve.org/CVERecord?id=CVE-2026-29023
Post summary
The post announces CVE‑2026‑29023, a disclosure of a hard‑coded API key in Keygraph Shannon’s router component that, if enabled and exposed, permits attackers to act.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-29023 - Keygraph Shannon Hard-coded Router API Key Intel Report: https://ift.tt/DW2uE5O
Post summary
The alert references CVE‑2026‑29023 for Keygraph Shannon routers with a hard‑coded API key, but gives no exploit proof, active‑use evidence, or remediation details.