CVE-2026-36721

The car rental management platform bookcars version v8.3 is vulnerable to an authentication bypass due to a lack of cryptographic signature verification in the validateAccessToken function. Attackers can exploit this flaw by using a forged JSON Web Token (JWT) to gain unauthorized access. While n...