Search: “oauth2”

CVE-2026-87802: Apache Syncope: SRA OAuth2 JWT signature verification bypass

Low-severity CVE-2026-87802 in Apache Syncope SRA allows JWT signature forgery in OAuth 2.0 setups without JWKS URI.

CVE-2026-87802 is a low-severity improper cryptographic signature verification flaw in Apache Syncope SRA affecting versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. When SRA is configured for OAuth 2.0 without a JWKS set URI assigned, an attacker can forge tokens, bypassing JWT signature verification.

oss-security·Sep 14, 16:02 UTC · 2d agoVulnerabilityCVE-2026-87802

ToddyCat: Keep calm and check logs

Kaspersky Securelist·Oct 12, 10:41 UTC · Oct 12, 2023Vulnerability

March 2025 Patch Tuesday forecast: A return to normalcy

Help Net Security·Mar 12, 11:42 UTC · Mar 12, 2025VulnerabilityCVE-2025-24989

Approov Alliance and Integration Program offers security solutions to protect APIs

Help Net Security·Sep 16, 08:03 UTC · Sep 16, 2024Vulnerability

Critical ownCloud flaw under attack (CVE-2023-49103)

Help Net Security·Nov 28, 00:00 UTC · Nov 28, 2023VulnerabilityCVE-2023-49103CVE-2023-49104CVE-2023-49105

VMware addressed several critical vulnerabilities in multiple products

Security Affairs·Apr 7, 07:10 UTC · Apr 7, 2022VulnerabilityCVE-2022-22954CVE-2022-22955CVE-2022-22956+5 CVEs

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products

The Hacker News·Apr 7, 05:49 UTC · Apr 7, 2022Vulnerability in the wildCVE-2022-22954CVE-2022-22961CVE-2022-22955+5 CVEs

Review: Netsparker Enterprise web application scanner

Help Net Security·Oct 19, 00:00 UTC · Oct 19, 2020Vulnerability1

Cloud Foundry disclosed a privilege escalation flaw in UAA software

Security Affairs·Jul 11, 08:09 UTC · Jul 11, 2017VulnerabilityCVE-2017-8032