Codeant.Ai New CVSS 10.0 Vulnerability CVE-2026-29000 Discovered
Article Content
Browse articles 
A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This vulnerability poses a significant risk to applications using this library, as it requires no authentication or user interaction for exploitation.
Ask AI about this cluster
Answers cite the sources they use
Updated 220d ago How this analysis works
Timeline
2017-03-07
First public exploit for CVE-2017-5638 released
2021-12-10
CVE-2021-44228 published
2026-03-04
CVE-2026-29000 published
2026-03-06
First public PoC for CVE-2026-29000 released
More articles in this cluster (2)
Following this threat?
Track Equifax and CVE-2017-5638 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Surge in Cyber Incidents Targeting Japanese Web Systems As of October 6, 2026, Japan has reported 119 incidents of information leakage from corporate web systems, a significant increase since July 2026. This surge, accounting for 68% of the year's reported incidents, raises concerns among security experts due to its unusual nature compared to past cyberattacks. The… 
Log4Shell Vulnerability: Ongoing Risks and Mitigations CVE-2021-44228, known as Log4Shell, is a critical remote code execution vulnerability in Apache Log4j 2, disclosed on December 10, 2021. This flaw allows attackers to execute arbitrary code by manipulating log messages, affecting a wide range of applications and services that utilize Log4j. Despite being disclosed…