CVE-2026-29000

CVE-2026-29000: pac4j JWT-Authentifizierungs-Umgehung PoC Proof of Concept für CVE-2026-29000 – Eine kritische Authentifizierungs-Umgehungsschwachstelle in der pac4j-JWT-Implementierung, die es Angreifern ermöglicht, Admin-Token ohne gültige Signatur zu fälschen. ⚠️ HAFTUNGSAUSSCHLUSS Dieses Tool...

CVE-2026-29000

CVE-2026-29000 Lab Laboratorio Java/SparkJava che simula un errore di autenticazione JWT/JWE relativo a CVE-2026-29000. L'applicazione gira sulla porta 4567 e fornisce API per testare il flusso di login valido, creare token falsificati e controllare la dashboard. Informazioni CVE CVE-2026-29000...

CVE-2026-29000-PoC

CVE-2026-29000 — Prova de Conceito de Bypass de Autenticação do JwtAuthenticator do pac4j-jwt Uma prova de conceito para CVE-2026-29000 , um bypass de autenticação no componente pac4j-jwt JwtAuthenticator CVSS 10.0 , Crítico. O script forja um token que se passa por qualquer usuário com qualquer...

CVE-2026-29000-PoC-Exploit

🚀 CVE-2026-29000 - Exploit di Bypass dell'Autenticazione pac4j-jwt CVE-2026-29000 - Creazione Admin con un Click tramite JWT alg:none + Crittografia JWE 📌 Panoramica Questo exploit sfrutta CVE-2026-29000 , una vulnerabilità critica con CVSS 10.0 nella libreria pac4j-jwt. Estratta la chiave...

Exploit for CVE-2026-29000

Lab Demo CVE-2026-29000: pac4j-jwt Authentication Bypass Môi...

Exploit for CVE-2026-29000

🚀 CVE-2026-29000 - pac4j-jwt Authentication Bypass Exploit !...

Exploit for CVE-2026-29000

HackTheBox — Principal Difficulty: Medium OS: Linux...

Exploit for CVE-2026-29000

pac4j-jwe-forge CVE-2026-29000 Proof-of-concept for CVE-202...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt JWE Authentication Bypass Lab...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt PlainJWT-in-JWE Authentication Bypa...

Exploit for CVE-2026-29000

CVE-2026-29000 - pac4j-jwt Authentication Bypass PoC Not...

Vulnerability fixed in pac4j-jwt

Pac4j has fixed a vulnerability in the pac4j-jwt library specifically for versions before 4.5.9, 5.7.9 and 6.3.3. The vulnerability is located in the JwtAuthenticator module of the pac4j-jwt library. This vulnerability allows an attacker with access to the server's RSA public key to forge JWT...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt Library-Level PoC Lab TL;DR Th...

GHSA-PM7G-W2CF-Q238 pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...

EUVD-2026-9505

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...

CVE-2026-29000

CVE-2026-29000 affects pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3. The issue is an authentication bypass in JwtAuthenticator when handling encrypted JWTs, enabling an attacker who has the server’s RSA public key to forge a JWE-wrapped PlainJWT with arbitrary subject and role claims. This...

CVE-2026-29000 pac4j-jwt JwtAuthenticator Authentication Bypass

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...

pac4j-jwt 数据伪造问题漏洞

pac4j-jwt is an JWT authentication module developed by pac4j as open source. Versions of pac4j-jwt prior to 4.5.9, 5.7.9, and 6.3.3 contained a data manipulation vulnerability. This vulnerability stems from the JwtAuthenticator’s inability to properly handle encrypted JWTs, leading to an...