Skip to main content

novel-plus CVE-2026-90940

| EUVDEUVD-2026-77484 MEDIUM
Use of Default Credentials (CWE-1392)
2026-09-14 VulnCheck GHSA-hqxh-9xh6-r77j
Authentication Bypass Novel Plus
6.9
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.3 MEDIUM

Network-accessible endpoint with publicly disclosed hardcoded credential (effectively PR:N); impact is limited to low availability via forced cache invalidation and database load spikes.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

4
Source Code Evidence Fetched
Sep 15, 2026 - 08:29 vuln.today
Analysis Generated
Sep 15, 2026 - 08:29 vuln.today
CVSS changed
Sep 14, 2026 - 14:37 NVD
5.3 (MEDIUM) 6.9 (MEDIUM)
CVE Published
Sep 14, 2026 - 13:58 cve.org
MEDIUM 6.9

DescriptionCVE.org

novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default value in the URL path. Attackers can trigger unauthorized cache invalidation by accessing the cache/refresh endpoint with the known default password, forcing unnecessary database queries to repopulate the cache.

AnalysisAI

Cache invalidation in novel-plus through 5.3.3 exposes an unauthenticated HTTP endpoint protected only by a hardcoded default password embedded in the application's source-controlled configuration file, allowing any remote attacker who supplies the known default value in the URL path to forcibly invalidate portal caches at will. The root cause (CWE-1392: Use of Default Credentials) means the credential is fully disclosed in the public GitHub repository and a VulnCheck-reported Python POC, reducing exploitation to a trivial one-liner. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The /cache/refresh/{password} endpoint must be reachable over the network, which is the default state for any internet-facing novel-plus deployment. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.9 (Medium) with vector AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L correctly captures the limited but fully network-accessible impact: an attacker can remotely trigger repeated cache invalidations, sustaining elevated database load and degrading portal responsiveness. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No vendor-released patch has been identified at time of analysis; v5.3.3 is the latest release and remains vulnerable. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Novel Plus

View all
CVE-2025-45890 CRITICAL POC
9.8 Jun 20

CVE-2025-45890 is a critical directory traversal vulnerability in Novel Plus before v5.1.0 that allows unauthenticated r
CVE-2024-0941 CRITICAL POC
9.8 Jan 26

A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. Rated critical severity (CVSS 9.8), this v
CVE-2024-0655 CRITICAL POC
9.8 Jan 18

A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Rated critical severity (CVSS 9.8), t
CVE-2023-46981 CRITICAL POC
9.8 Nov 05

SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted scrip
CVE-2023-30058 CRITICAL POC
9.8 Sep 11

novel-plus 3.6.2 is vulnerable to SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
CVE-2023-1606 CRITICAL POC
9.8 Mar 23

A vulnerability was found in novel-plus 3.6.2 and classified as critical. Rated critical severity (CVSS 9.8), this vulne
CVE-2023-1594 CRITICAL POC
9.8 Mar 23

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Rated critical severity (CVSS 9.8), th
CVE-2022-36672 CRITICAL POC
9.8 Sep 01

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. Rated critical seve
CVE-2022-35121 CRITICAL POC
9.8 Aug 17

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/Boo
CVE-2023-2041 HIGH POC
8.8 Apr 14

A vulnerability classified as critical was found in novel-plus 3.6.2. Rated high severity (CVSS 8.8), this vulnerability
CVE-2023-2040 HIGH POC
8.8 Apr 14

A vulnerability classified as critical has been found in novel-plus 3.6.2. Rated high severity (CVSS 8.8), this vulnerab
CVE-2023-2039 HIGH POC
8.8 Apr 14

A vulnerability was found in novel-plus 3.6.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl

Same weakness CWE-1392 – Use of Default Credentials

View all
CVE-2026-26341 CRITICAL POC
9.8
CVE-2026-26366 CRITICAL POC
9.8
CVE-2026-58453 CRITICAL POC
9.3
CVE-2026-41939 CRITICAL POC
9.3
CVE-2024-4007 HIGH POC
8.7
CVE-2026-1803 HIGH POC
8.1
CVE-2025-6529 HIGH POC
7.4
CVE-2025-1160 MEDIUM POC
6.9

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-90940 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy