CVE-2026-73178

Apache Syncope is vulnerable to exposure of sensitive JWT access tokens via its REST API. An administrator with adequate entitlements can retrieve the list of existing access tokens, including their signed JWT bodies, and reuse them to impersonate users with higher administration entitlements . T...

CVE-2025-25953

Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information...