With CVE-2026-29000, what are the most notable CVSS 10.0 vulnerabilities of all time?

Back Reddit

With CVE-2026-29000, what are the most notable CVSS 10.0 vulnerabilities of all time?

Reddit • March 5, 2026

Share: View original

32 votes, 12 . A new CVSS 10.0 just dropped , pac4j-jwt authentication bypass. An attacker can impersonate any user (including admin) ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New CVSS 10.0 Vulnerability CVE-2026-29000 Discovered A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This vulnerability poses a significant risk to applications using this library, as it requires no authentication or user interaction for exploitation. 2 sources 71

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

T1078 - Valid Accounts