CVE-2026-75759

A flaw was found in oidcc. This vulnerability allows an unauthenticated attacker to impersonate an arbitrary user. The oidcc component improperly verifies cryptographic signatures in encrypted ID tokens or JSON Web Application Response JARM responses. By exploiting this, an attacker can forge...