Skip to content
Threat Feed

Tag

Cve-2026-29000

1 brief RSS
critical advisory

CVE-2026-29000: pac4j JWT Authentication Bypass Vulnerability

A public exploit is available for CVE-2026-29000, a critical authentication bypass vulnerability in pac4j's JWT implementation, allowing attackers to forge admin tokens without a valid signature by exploiting flaws in the library's handling of unsigned tokens and JWE-wrapped tokens.

pac4j JWT module authentication-bypass jwt pac4j cve-2026-29000
2r 3t 1c 4i