Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Critical Hoppscotch Flaw Lets Unauthenticated Attackers Overwrite JWT Secrets

Cyber Press
Cyber Press
Published June 29, 2026Original Report

Excerpt

A maximum-severity vulnerability has been disclosed in the self-hosted version of Hoppscotch, the widely used open-source API development platform. Tracked as CVE-2026-50160 and carrying a CVSS 3.1 base score of 10.0, the flaw enables unauthenticated attackers to overwrite JWT signing secrets and seize complete control of a target server through a single HTTP request. Hoppscotch published the details via GitHub Security Advisory GHSA-j542-4rch-8hwf on May 28, 2026. The…

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-50160MediumScore 51/100First seen

IOC Relationship Graph

Building graph…