CVE-2026-67404

A flaw was found in rabbitmq-server. When the OAuth2 plugin fetches JWKS and no CA bundle is available, TLS verification silently falls back to verifynone. A man-in-the-middle attacker can forge the JWKS response, causing the broker to accept arbitrary JWTs. Mitigation Mitigation for this issue i...

rabbitmq-server: rabbitmq-server: OAuth2 silent verify_none fallback for JWKS fetch

A flaw was found in rabbitmq-server. When the OAuth2 plugin fetches JWKS and no CA bundle is available, TLS verification silently falls back to verifynone. A man-in-the-middle attacker can forge the JWKS response, causing the broker to accept arbitrary JWTs...

PT-2026-55297

Name of the Vulnerable Software and Affected Versions Dapr affected versions not specified Description Dapr Sentry's OIDC discovery endpoint /.well-known/openid-configuration derives the issuer and jwks uri from the request Host. When no allowed-hosts list is configured, the system honors an...

CVE-2026-11800

A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging an assertion, the attacker can create unauthorized access tokens. This enables the attacker to...