CVE-2026-29000

CVE-2026-29000 CVE-2026-29000: Critical Authentication Bypass in pac4j-jwt - Using Only a Public Key CVSS 10 pac4j-jwt Authentication Bypass Exploit CVE-2026-29000 Vulnerability Summary CVE-2026-29000 is a critical authentication bypass in the pac4j-jwt library versions 6.0.3 and below. When the...

CVE-2026-29000

CVE-2026-29000 — pac4j-jwt JWE Authentication Bypass CTF lab for researching the JWE authentication vulnerability in the pac4j-jwt library CVSS 9.3 Critical · CWE-287 · Affected: pac4j-jwt ← access admin panel ↓ Read sensitive data: employee list, system config, flag Project structure...

cve-2026-29000

CVE-2026-29000 漏洞利用 通过 JWE 包装的 PlainJWT 绕过 pac4j-jwt 中的 JWT 身份验证 漏洞描述 CVE-2026-29000 是一个严重的安全绕过漏洞，影响 pac4j-jwt 4.5.9、5.7.9 和 6.3.3 之前的版本。该漏洞允许远程攻击者伪造身份验证令牌并绕过签名验证。 技术细节 该漏洞存在于处理加密 JWT（JWE）时的 JwtAuthenticator 组件中。当收到 JWE 令牌时： 1. 服务器使用其 RSA 私钥解密 JWE 2. 解密后的内容显示一个内部 JWT 3. 漏洞 ：服务器提取内部 JWT 中的声明，但未验证其...

CVE-2026-29000-Python-PoC-pac4j-JWT-AuthenticationBypass-Poc

CVE-2026-29000 – pac4j JWT Authentication Bypass Python PoC Python Proof‑of‑Concept for CVE‑2026‑29000 , a critical authentication bypass affecting applications using the pac4j JWT module. The vulnerability allows attackers to authenticate as arbitrary users by sending a malicious JWE token...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt PlainJWT-in-JWE Authentication Bypa...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the JwtAuthenticator component when handling encrypted JWTs. An attacker can gain unauthorized access by crafting a JWE-wrapped PlainJWT with arbitrary claims if they possess the...