Vulnerability · Published Feb 9, 2026 · Assigned by VulDB
CVE-2026-2215rachelos WeRSS we-mp-rss JWT auth.py default key
Low 3.7
In plain English
A low-severity security flaw in WeRSS we-mp-rss from rachelos. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Official description
A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the file core/auth.py of the component JWT Handler. Performing a manipulation of the argument SECRET_KEY results in use of default cryptographic key. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit is now public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| rachelos | WeRSS we-mp-rss | 1.4.01.4.11.4.21.4.31.4.41.4.51.4.61.4.7 |
Weakness: CWE-1394 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-344932 | rachelos WeRSS we-mp-rss JWT auth.py default key vdb-entry, technical-description
- VDB-344932 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #752756 | rachelos WeRSS WeRSS<=1.4.8 Weak Authentication third-party-advisory
- https://www.notion.so/WeRSS-Weak-JWT-Key-Leading-to-Authentication-Bypass-2feea92a3c41803faadae58327facd7b exploit