Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
@signalk
Resources-provider
@signalk Resources-provider vulnerabilities
@signalk
resources-provider
,
signalk
signalk-server
+1 more
Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution
CVE-2026-123807
Fix available
9.8
Critical
October 30, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open