CVE-2026-82463

pac4j-core (a Java-based authentication and authorization library) versions prior to 6.5.6 are affected by an authentication bypass in CheckProfileTypeAuthorizer . The root cause is reversed profile type validation logic , which allows an attacker authenticated via a weaker client (e.g., generic ...