Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-0622

Open 5GS WebUI uses a hard-coded JWT signing key

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NewPlane open5GS

  • 0 to ≤ 2.7.6affected

References