CVE-2026-29000

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 5, 2026

Last Seen

March 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

New CVSS 10.0 Vulnerability CVE-2026-29000 Discovered71.3

A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This vulnerability poses a significant risk to applications using this library, as it req...

Vulnerability in pac4j-jwt Allows for Potential Authentication Bypass63.8

A vulnerability has been identified in the pac4j-jwt (JwtAuthenticator) module, which could enable attackers to bypass authentication mechanisms. This Java module is part of the pac4j security framework used for managing JSON Web Tokens (JWT) in web applications. Exploitation of this flaw poses a si...