Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could allow an unauthenticated attacker to compromise the confidentiality of the affected resource, provided they have a valid token with which to interact with the API.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-20 | 1 | Disclosure1 |
| 2026-04-22 | 2 | Disclosure2 |
⚠️ #INCIBEaviso | Múltiples vulnerabilidades en #Fullstep #CVE CVE-2026-5749 CVE-2026-5750 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-fullstep #AvisosDeSeguridad #TI
Post summary
The text announces Incibe’s security advisory reporting multiple CVEs (CVE‑2026‑5749 and CVE‑2026‑5750) affecting Fullstep, without providing PoC details, exploit code, or evidence of active exploitation.
CVE-2026-5749 Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with au… https://www.cve.org/CVERecord?id=CVE-2026-5749
Post summary
The text announces CVE-2026-5749, noting inadequate access control in Fullstep V5's registration process that allows unauthenticated users to obtain a valid JWT token.
CVE-2026-5749 Unauthenticated JWT Token Acquisition via Inadequate Access Control in Fullstep V5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5749
Post summary
The post announces a newly identified unauthenticated JWT token acquisition flaw in Fullstep V5, providing a brief technical overview but lacking details on PoC, exploitation, or remediation.