CVE-2026-29000

This repository does not have a README...

Principal-HackTheBox

HackTheBox — Principal Dificultad: Media SO: Linux Plataforma: HackTheBox Resumen Aplicación web que ejecuta pac4j-jwt v6.0.3 — vulnerable a CVE-2026-29000. La clave pública RSA está expuesta sin autenticación a través de un endpoint JWKS y puede usarse para forjar un token JWE de administrador...

pac4j-check v0.2.0

pac4j-check 离线排查 CVE-2026-29000CVSS 10.0—— 包括官方 advisory 没有列出的那些包。 English | 中文 单个 jar,约 24KB,零运行时依赖,Java 8 起可用,完全离线,不外传任何数据。 这个漏洞是什么 org.pac4j:pac4j-jwt 的 JwtAuthenticator 在处理加密 JWTJWE 时未强制校验签名。 攻击者只要拿到服务器的 RSA 公钥公钥本来就是公开的, 就能构造一个 JWE 包裹的 PlainJWT,把 subject 和 role 写成任意值, 以任意用户身份登录,包括管理员 。无需任何凭据。...

Exploit for CVE-2026-29000

Lab Demo CVE-2026-29000: pac4j-jwt Authentication Bypass Môi...

Exploit for CVE-2026-29000

CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof...

Exploit for CVE-2026-29000

🚀 CVE-2026-29000 - pac4j-jwt Authentication Bypass Exploit !...

Exploit for CVE-2026-29000

CVE-2026-29000-pac4j-jwt-auth-byp...

Exploit for CVE-2026-29000

cve-2...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt PlainJWT-in-JWE Authentication Bypa...

Exploit for CVE-2026-29000

CVE-2026-29000 - pac4j-jwt Authentication Bypass PoC Not...

CVE-2026-29000

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...

com.efluid.oss:efluid-datagate-app (>=3.1.3, <=6.1.5), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.3, <=6.1.5) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=5.0.1, <=5.7.8)

org.pac4j:pac4j-jwt MAVEN version =5.0.1, =3.1.3, =3.1.3, =0.8.0-rc0, =0.8.0-rc0, =2.0.6, =2.2.1, =2.0.6, =2.1.0 Source cves: CVE-2026-29000 Source advisory: SNYK:JAVA-ORGPAC4J-15428218...

org.apereo.cas:cas-server-core (5.3.0-rc4), org.apereo.cas:cas-server-core-api-audit (5.3.0-rc4) +225 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.0.0-rc2)

org.pac4j:pac4j-jwt MAVEN version 3.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-server-core 5.3.0-rc4 - org.apereo.cas:cas-server-core-api-audit 5.3.0-rc4 -...

org.apereo.cas:cas-management-webapp (>=5.0.3, <=5.0.5), org.apereo.cas:cas-management-webapp-support (>=5.0.3, <=5.0.5) +83 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.9.6)

org.pac4j:pac4j-jwt MAVEN version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3,...

org.apereo.cas:cas-management-webapp-support (5.2.0-rc2), org.apereo.cas:cas-management-webapp-support-ldap (>=5.2.0-rc2, <=5.2.0) +199 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (2.1.0)

org.pac4j:pac4j-jwt MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.2.0-rc2 - org.apereo.cas:cas-management-webapp-support-ldap =5.2.0-rc2,...

org.apereo.cas:cas-management-webapp (5.0.0.rc1), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m3, <=5.0.0.rc1) +77 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.9.1)

org.pac4j:pac4j-jwt MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc1 - org.apereo.cas:cas-management-webapp-support =5.0.0.m3, =5.0.0.m3,...

org.apereo.cas:cas-management-webapp-configuration (5.3.3), org.apereo.cas:cas-management-webapp-support (5.3.3) +232 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.1.0)

org.pac4j:pac4j-jwt MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.3 - org.apereo.cas:cas-management-webapp-support 5.3.3 -...

org.linuxprobe:shiro-pac4j-base (>=0.0.1.rs1, <=0.0.1.rs4), org.linuxprobe:shiro-pac4j-spring-boot-start (>=0.0.1.rs1, <=0.0.1.rs7) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.8.3)

org.pac4j:pac4j-jwt MAVEN version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.linuxprobe:shiro-pac4j-base =0.0.1.rs1, =0.0.1.rs1, =0.0.1.rs7 Source cves: CVE-2026-29000 Source advisory:...

org.apereo.cas:cas-management-webapp-support (>=5.1.0, <=5.2.0-rc1), org.apereo.cas:cas-management-webapp-support-ldap (>=5.1.0, <=5.2.0-rc1) +134 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (2.0.0)

org.pac4j:pac4j-jwt MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-support =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0,...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.0.m2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.0.m2) +74 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.8.8)

org.pac4j:pac4j-jwt MAVEN version 1.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1,...