CVE-2026-36721

A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token...

CVE-2026-36721

CVE-2026-36721 describes a security flaw in bookcars v8.3 where the validateAccessToken function does not verify the cryptographic signature, allowing an attacker to bypass authentication with a forged JWT. Affected software: bookcars v8.3 (component: validateAccessToken). Root cause: missing ver...