91 matches found
CVE-2026-59243
CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT signature bypass Korean: README.ko.md Apache advisory: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl published 2026-07-29 CVE record: https://vulners.com/cve/CVE-2026-59243 Fixed in: apache-airflow-providers-fab==3.7.3 Class:...
CVE-2026-92787
A flaw was found in Feast. The application fails to verify JSON Web Token JWT cryptographic signatures before establishing user identity. A remote, unauthenticated attacker can exploit this issue by supplying an unverified token to bypass role-based access controls and assume a trusted internal...
CVE-2026-45156-POC
Glitch Matrix Hacker 🚨 CVE-2026-45156 🚨 Vulnerabilidad de Omisión de Firma JWT ID4me en useroidc de Nextcloud Explotación de Prueba de Concepto PoC Totalmente Automatizada para la Toma de Control Administrativo. 📖 La Historia Detrás de cada CVE hay una historia. Este se encontró a las 2 AM en una...
PYSEC-2026-4106 Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
Summary The Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SHA256 signatures. Any well-formed token was accepted, allowing an unauthenticated attacker to impersonate any user and read or modify their sync data. Severity: Critical CVSS 3.1:...
Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
Summary The Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SHA256 signatures. Any well-formed token was accepted, allowing an unauthenticated attacker to impersonate any user and read or modify their sync data. Severity: Critical CVSS 3.1:...
CVE-2026-92787
Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write...
EUVD-2026-80389
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14916: Improper Handling of Unexpected Data Type
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
PT-2026-93431
Name of the Vulnerable Software and Affected Versions Kong API Gateway Enterprise affected versions not specified Description A JWT signature verification issue exists in Kong components that handle JWT validation for MCP OAuth2 or DataKit integrations. The system fails to properly validate wheth...
PT-2026-94064
Name of the Vulnerable Software and Affected Versions Feast versions prior to 0.66.0 Description The software fails to verify JSON Web Token JWT signatures before establishing user identity. This allows an attacker to bypass role-based access control by presenting an unverified token containing a...
CVE-2026-87802 Apache Syncope: SRA OAuth2 JWT signature verification bypass
Improper verification of cryptographic signature vulnerability in Apache Syncope. When SRA is configured for OAuth 2.0 without JWKS set URI assigned, an attacker can forge arbitrary JWTs to impersonate any user identity and permissions, gaining full access to services proxied by SRA. This issue...
CVE-2026-87802
Apache Syncope is vulnerable to an improper verification of cryptographic signature when the SRA is configured for OAuth 2.0 without a JWKS set URI assigned. This flaw allows an attacker to forge arbitrary JWTs to impersonate any user identity and permissions, potentially gaining full access to s...
CVE-2026-87802 Apache Syncope: SRA OAuth2 JWT signature verification bypass
Improper verification of cryptographic signature vulnerability in Apache Syncope. When SRA is configured for OAuth 2.0 without JWKS set URI assigned, an attacker can forge arbitrary JWTs to impersonate any user identity and permissions, gaining full access to services proxied by SRA. This issue...
RDK-B WebUI contains multiple vulnerabilities
Overview RDK Central RDK-B WebUI version, rdkb-2025q4-kirkstone, contains multiple vulnerabilities involving memory corruption, improper authentication, race conditions, and insufficient input validation. An attacker with network access to an affected WebUI may be able to bypass authentication,...
CVE-2025-9210 Missing JSON Web Token signature validation in Otalio Ship Property Management System
Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs...
CVE-2026-54733 moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoint
The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...
CVE-2026-54733: Improper Verification of Cryptographic Signature
The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...
CVE-2026-10714: Weak Authentication
A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...
