Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-48814 · Microsoft / collected KEV context

EUVD-2026-37787

GHSA-r78r-rwrf-rjwp

cve-program · CVE-2026-48814

• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2
• https://github.com/advisories/GHSA-j3vx-cx2r-pvg8

euvd · EUVD-2026-37787

• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2
• https://github.com/advisories/GHSA-j3vx-cx2r-pvg8

nvd · CVE-2026-48814

• https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2
• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp
• https://github.com/advisories/GHSA-j3vx-cx2r-pvg8

osv · GHSA-r78r-rwrf-rjwp

• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp
• https://nvd.nist.gov/vuln/detail/CVE-2026-48814
• https://github.com/Jovancoding/Network-AI
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2
• https://github.com/advisories/GHSA-j3vx-cx2r-pvg8

No related operational record is retained in the current change model.