Codeant.Ai
New CVSS 10.0 Vulnerability CVE-2026-29000 Discovered
First seen 6 Mar 2026, 16:15 UTC
•
•75% similarity
•71.2
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This vulnerability poses a significant risk to applications using this library, as it requires no authentication or user interaction for exploitation.
ThreatCluster AI
Timeline
2017-03-07
First public exploit for CVE-2017-5638 released
2021-12-10
CVE-2021-44228 published
2026-03-04
CVE-2026-29000 published
2026-03-06
First public PoC for CVE-2026-29000 released