CVE-2026-75431
PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code.
- Published Sep 4, 2026
- CVSS 9.1 critical
- 1.1% chance of exploitation in the next 30 days (EPSS)