IT SBIT Services
Schneeberger
DEEN
CVE tracker

New vulnerabilities – clearly explained

Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA and the probability of exploitation (EPSS) – each one researched individually: what is affected, what helps, what to do.

4published today
3423in the last 7 days
248of them critical
9newly exploited (7 days)

1 vulnerability · Vendor: yincongcyincong

CVE-2026-119660Critical 9.3

MuseBot: Authentication bypass via hard-coded default session key

MuseBot before 2.0.0 uses the publicly known default session key 'muse_bot_session_key' unless a custom SESSION_KEY is set. An unauthenticated attacker who can reach the admin interface can sign a session cookie with this key and gain full administrative access. From there the attacker can read password hashes, chat records and bot configuration, and stop bots.

yincongcyincong · MuseBot

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touchRSS feed

Data: NVD (NIST), CISA KEV, FIRST EPSS – updated continuously.