{"id":"CVE-2026-125298","published":"2026-11-10T22:18:30.240","lastModified":"2026-11-10T22:18:30.240","description":"AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://github.com/trevorkaon/vulnerability-security-research/blob/main/advisories/asiainfo/CVE-2026-125298.md","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-313-03.json","tags":[]},{"url":"https://www.asiainfo.eu/cloudbss","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-125298","tags":[]}],"exploitRefs":[{"url":"https://github.com/trevorkaon/vulnerability-security-research/blob/main/advisories/asiainfo/CVE-2026-125298.md","tags":[]}],"hasPoc":true,"ai":{"summary":"The AsiaInfo BSS 9.2.0–9.2.40 fails to properly validate cryptographic signatures on JWTs, allowing attackers to forge valid-looking tokens without knowing the signing key. This enables unauthenticated remote users to impersonate privileged accounts and execute unauthorized administrative actions.","exploitability":"Exploitation is trivial for a remote, unauthenticated attacker due to the lack of signature verification; no prior access or user interaction is required.","blast_radius":"Successful exploitation could lead to full system compromise including data exfiltration, unauthorized configuration changes, and service disruption across the business support system.","remediation":"Upgrade to AsiaInfo BSS version 9.2.41 or later, which includes the fix for CVE-2026-125298.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["jwt-forgery","auth-bypass","critical","webapp","cwe-347"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:53:17.086Z"}}