452 matches found
CVE-2026-30863-Exploit
CVE-2026-30863 – Parse Server JWT 受众验证 受影响版本 Parse Server 8.6.10 和 9.5.0-alpha.11 受影响组件 Google 认证适配器（GoogleAuthAdapter） Apple 认证适配器（AppleAuthAdapter） Facebook 认证适配器（FacebookAuthAdapter） 根本原因 当适配器配置为未 设置受众参数（Google/Apple 的 clientId，Facebook 的 appIds）时，底层 JWT 验证（使用 jsonwebtoken 或类似工具）会跳过 audience...
CVE-2026-73208
A flaw was found in Dovecot. This vulnerability allows an attacker to bypass authentication by exploiting how OAuth2 tokens are validated. If an OAuth2 token response does not include a scope claim, Dovecot incorrectly uses the audience claim in its place for authorization checks. This can lead t...
CVE-2026-66908
CVE-2026-66908 — camel-platform-http-main 未校验 JWT iss/aud 针对 Apache Camel 漏洞的可运行 PoC 复现工具：当未配置 jwtIssuer 或 jwtAudience 时，camel-main 内嵌 HTTP 服务器 仅凭密钥库构建其 JWT 认证器，因此入站令牌仅检查签名和过期时间 ——iss 和 aud 声明从未被校验。 运行时| 目录| 技术栈 ---|---|--- Camel Main （独立运行）| camel-main/| camel-main 4.21.0 +...
EUVD-2026-68119
pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token validation. Attackers can substitute access tokens minted for other clients to create authenticated sessions without proper issuer, audience, nonce, or subject verification...
Linux Distros Unpatched Vulnerability : CVE-2026-73208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the...
AZL-98295 CVE-2026-73208 affecting package dovecot 2.3.20-1
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
ALPINE-CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
CVE-2026-73208
Dovecot (Open-Xchange) contains an OAuth2 token validation flaw : when a token response lacks a scope claim , the audience claim is used in its place and checked against configured required scopes. Because these are distinct concepts, a token granted no relevant permissions can be accepted if its...
CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
EUVD-2026-67680
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
UBUNTU-CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
CVE-2026-73208
An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...
PT-2026-83074
Name of the Vulnerable Software and Affected Versions Dovecot versions prior to 2.4.5-1.1 Description An authentication flaw exists where a token intended for a different purpose can be used to authenticate. This occurs when an OAuth2 token response lacks a scope claim, causing the system to use...
BIT-KEYCLOAK-2026-37979 Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypass
A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect OIDC token introspection endpoint allows a confidential client to bypass audience restrictions. An attacker-controlled client with valid credentials can retrieve sensitive token claims intended for other...
CVE-2026-66908
Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...
CVE-2026-70687
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...
EUVD-2026-61642
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...
CVE-2026-19714
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to authenticate as any user whose email address such a token carries, up to and including an administrator. Every site with the Simple JWT Log...