Vulnerability in pac4j-jwt Allows for Potential Authentication Bypass

Reddit

Vulnerability in pac4j-jwt Allows for Potential Authentication Bypass

First seen 6 Mar 2026, 08:11 UTC • •63.8

Article Content

1 / 11

Browse articles

ThreatCluster •March 12, 2026 at 16:10 UTC

A vulnerability has been identified in the pac4j-jwt (JwtAuthenticator) module, which could enable attackers to bypass authentication mechanisms. This Java module is part of the pac4j security framework used for managing JSON Web Tokens (JWT) in web applications. Exploitation of this flaw poses a significant risk to applications relying on this framework for secure user authentication.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 183d ago How this analysis works

Timeline

2026-03-05

Vulnerability in pac4j-jwt announced

Recent

Security advisories issued for affected systems

More articles in this cluster (10)

Threat Graph

9 entities, 16 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
Malware
Zero-day Exploit
T1190 - Exploit Public-Facing Application

Vulnerability (1)

CVE-2026-29000

Affected Platform (3)

Java
Nimbus Jose+jwt
Pac4j

Tool (1)

Pac4j-jwt

Relationships

Pac4j-jwt exploits CVE-2026-29000
CVE-2026-29000 targets Java
CVE-2026-29000 targets Nimbus Jose+jwt
CVE-2026-29000 targets Pac4j
Data Breach targets Java
Data Breach targets Nimbus Jose+jwt
Data Breach targets Pac4j
Malware targets Java
Malware targets Nimbus Jose+jwt
Malware targets Pac4j
Zero-day Exploit targets Java
Zero-day Exploit targets Nimbus Jose+jwt
Zero-day Exploit targets Pac4j
T1190 - Exploit Public-Facing Application targets Java
T1190 - Exploit Public-Facing Application targets Nimbus Jose+jwt
T1190 - Exploit Public-Facing Application targets Pac4j

Following this threat?

Track CVE-2026-29000 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors A new exploit kit named BlueMoon has been rapidly adopted by at least four espionage groups, primarily linked to China, exploiting vulnerabilities in Google Chrome and Microsoft Windows. The first observed use of BlueMoon was on August 28, 2026, by the China-aligned threat actor TA412, with subsequent adoption by…