Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. Attackers can access the cron controller without authentication and retrieve the exposed secret key from the response, enabling them to trigger scheduled task execution outside of the intended schedule.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-41928 Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secre… https://www.cve.org/CVERecord?id=CVE-2026-41928
Post summary
CVE-2026-41928 reveals an information disclosure flaw in Vvveb before 1.0.8.2’s cron controller, permitting unauthenticated attackers to extract application secrets.
CVE-2026-41928 Information Disclosure in Vvveb Before 1.0.8.2 Cron Controller https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41928
Post summary
The post announces an information disclosure vulnerability (CVE-2026-41928) affecting Vvveb's Cron Controller before version 1.0.8.2, providing only a link to the vulnerability details.