CVE-2026-41928

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.2

Description An information disclosure issue exists in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. By accessing the cron controller without authentication, an attacker can obtain the exposed secret key from the response, which enables the triggering of scheduled task execution outside of the intended schedule.

Recommendations Update to version 1.0.8.2 or later.