Actor Tokens Vulnerability is a vulnerability tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed March 6, 2026; most recent activity March 6, 2026.
A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This…