3 matches found
CVE-2026-36721
A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token...
0.00397EPSS
SaveExploits0References1
CVE-2026-36721
The car rental management platform bookcars version v8.3 is vulnerable to an authentication bypass due to a lack of cryptographic signature verification in the validateAccessToken function. Attackers can exploit this flaw by using a forged JSON Web Token (JWT) to gain unauthorized access. While n...
9.8CVSS5.8AI score0.00397EPSS
SaveExploits0References1
CVE-2026-36721: Improper Verification of Cryptographic Signature
A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token...
9.8CVSS5.8AI score0.00397EPSS
SaveExploits0References2
20