databufflabs has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 9.8 (critical), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- databuff 2
Worst active — by depth score
CVE-2026-111693Critical· 9.8DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials66CVE-2026-111692Critical· 9.8DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService66
databufflabs vulnerabilities
CVEs affecting databufflabs, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111693Critical· 9.8PoCDataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials
DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credent…
CVE-2026-111692Critical· 9.8PoCDataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService
DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of…