CVE-2026-126658 | jordan-dalby ByteStash up to 1.6.1 validateApiKey session expiration

November 11, 2026 Yanac

A vulnerability was found in jordan-dalby ByteStash up to 1.6.1. It has been declared as critical. Affected by this vulnerability is the function validateApiKey. The manipulation results in session expiration.

This vulnerability was named CVE-2026-126658. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More