#JWT
All CosmicBytez Labs articles tagged #JWT, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-113615: GS JWT Authentication for WP REST API Unauthenticated SQL Injection
Critical CVSS 9.8 SQL injection in GS JWT Authentication for WP REST API (≤ 1.0.0) lets unauthenticated attackers obtain an administrator session.
- Security
CVE-2026-118690: Signal K Server Unauthenticated Log Download Leads to Admin Takeover
Signal K Server before 2.33.0 exposes /skServer/ziplogs without authentication, letting attackers steal the JWT secret and forge admin tokens (CVSS 9.8).
- Security
CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
CISA added this 2021 ONLYOFFICE Docs path traversal (CVSS 9.8) to its KEV catalog on Oct 8, 2026, confirming active RCE exploitation.
- Security
CVE-2026-97720: Apache Impala JWT/OAuth Authentication Bypass
Apache Impala executor webservers accept any valid JWT without checking its signature, letting attackers bypass JWT/OAuth auth entirely.
- Security
CVE-2026-61421: Hard-Coded JWT Signing Key in Dell CSM Authorization Enables Admin Token Forgery
A hard-coded JWT signing key in Dell CSM Authorization lets unauthenticated attackers forge admin tokens and seize control.
- Security
CVE-2026-102268: PyJWT is_pem_format PEM Validation Bypass
A PEM-detection gap in PyJWT lets mutated public-key PEMs slip past its HMAC guard, enabling JWT signature forgery.
- Security
MStore API Plugin: Unauthenticated JWT Forgery Auth Bypass
Missing signature verification in MStore API's Firebase phone-auth handler lets attackers forge JWTs and impersonate any WordPress account.
- Security
Omnivore API: JWT Algorithm Confusion in Apple Sign-In Enables Account Takeover (CVE-2026-82454)
CVE-2026-82454 (CVSS 9.1): a JWT alg-confusion bug in Omnivore's Apple sign-in lets attackers forge tokens and take over any linked account.
- Security
CVE-2026-52539: Hardcoded JWT Secret in Outstatic CMS Enables Admin Takeover
Outstatic CMS versions up to and including 2.1.9 ship a publicly known default JWT signing secret, allowing unauthenticated attackers to forge valid admin...
- Security
CVE-2026-49352: 9Router Hardcoded JWT Secret Allows Complete Authentication Bypass
A critical CVSS 9.8 vulnerability in 9Router versions 0.2.21–0.4.43 exposes a hardcoded fallback JWT secret in source code, enabling attackers to forge...
- Security
CVE-2026-53471: migration-planner JWT Source ID Claim Not Validated in Agent API
A critical improper authentication vulnerability (CVSS 9.6) in Red Hat's migration-planner agent-API middleware allows authenticated agents to update...
- Security
CVE-2025-57735: Apache Airflow JWT Token Not Invalidated on Logout
A critical CVSS 9.1 vulnerability in Apache Airflow fails to invalidate JWT tokens upon user logout, allowing intercepted tokens to be reused for...
- Security
CVE-2026-1114: lollms JWT Weak Secret Key Allows Admin
A critical vulnerability (CVSS 9.8) in parisneo/lollms v2.1.0 allows attackers to brute-force the application's JWT secret key offline, forge...
- Security
CVE-2026-31946: Critical JWT Signature Verification Bypass
OpenOlat versions 10.5.4 through 20.2.4 fail to verify JWT signatures in their OpenID Connect implicit flow, allowing unauthenticated attackers to...