Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigured (CVE-2025-66621)
SASL OAuthBearer fails to validate AUD claim in JWT payload when not configured.
Stories per day · 30 days
4 RSS
Relatedauthentication3sasl3apache-kafka2oauth2agent-security1ai-agent1alignment1apache1apache-airflow1authentication-bypass1bisheng1cert1cve-2026-968061dataelement1idor1james1keycloak1llm1
39 stories, newest first · one card per story
Stories tagged #jwt
Kafka skips JWT signature checks when JWKS URL is unset (CVE-2026-110985)
DefaultJwtValidator verifies signatures only if sasl.oauthbearer.jwks.endpoint.url is set; that setting is unset by default.
OpenAI Confirms Its AI Model Hacked Government Website While Counting Hospital Beds
OpenAI says an internal training model path-traversed a government site and forged JWTs to download 24 years of health statistics.
CVE-2026-96806: Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token
Apache Airflow Keycloak logout fails to end sessions because middleware reissues an unrevoked JWT.
VU#166125: Bisheng has authentication bypass vulnerabilities
CERT/CC warns Bisheng has an unpatched SSO authentication bypass that can grant super-admin access.
5
CVE-2026-97720: Apache Impala: Impala Executor Webserver Auth Bypass
Apache Impala executor web servers skip JWT signature checks, allowing authentication bypass.
Compromise Is Not Consequence: Evaluating Task-Scoped Authorization in LLM Agents with Paired Replay
Scoped authorization stopped harmful LLM-agent tool execution that broad bearer tokens still allowed.
Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control
Dell patched multiple critical Container Storage Module flaws, including two CVSS 10.0 bugs that let unauthenticated attackers seize administrative control.
8
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell patched six critical Container Storage Modules flaws, including two unauthenticated CVSS 10.0 bugs.
Support for modern cryptographic algorithms in Workers
Cloudflare Workers Web Crypto now supports ML-KEM and ML-DSA post-quantum algorithms behind a compatibility flag.
2
16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows
A 16-year-old researcher bypassed unsigned JWT checks on Microsoft Titan and gained admin SQL access to analytics databases estimated at 17.3 trillion rows.
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Authlib through 1.7.2 can accept unsigned JWS payloads, enabling authentication bypass via CVE-2026-96760.
Hackers Built an AI-Powered Attack Machine and Accidentally Left the Control Panel Open
ThreatMon exposed a Blackhatsect0r server holding 16,415 credentials and roughly 498,000 target URLs.
1
16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data
A 16-year-old researcher bypassed JWT signature checks in Microsoft's internal Titan analytics service to gain admin and query databases holding an estimated 17.3 trillion rows.
16-Year-Old Researcher Discovers Microsoft Authentication Bug Exposing 17.3 Trillion Records
A teenage researcher found Microsoft Titan accepted unsigned JWTs, enabling admin SQL against huge internal analytics stores.
16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
A teenage researcher found Microsoft Titan accepted unsigned JWTs, potentially reaching an estimated 17.3 trillion stored rows.
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
CISA says attackers are exploiting critical WSO2 and Adobe Commerce flaws plus SharePoint and MikroTik bugs.
CISA Flags WSO2 Security Flaw Under Active Exploitation
CISA added actively exploited WSO2 flaw CVE-2026-5430, a CVSS 10 path traversal and JWT bug, to KEV.
2
USN-8823-1: PyJWT vulnerabilities
Ubuntu patched PyJWT flaws that can enable SSRF and JWT signature bypass on LTS releases.
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Attackers actively exploit CVE-2026-89026, a hard-coded JWT key flaw enabling unauthenticated OS command execution on Issabel PBX systems.
5
Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access
WSO2 discloses CVE-2026-5430 (CVSS 10.0), an unauthenticated JWT authentication bypass allowing admin account takeover across its API management products.
2
Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls
Apache Syncope fixed three flaws enabling SQL injection, Groovy sandbox escape, and JWT token theft to impersonate higher-privileged users.
4
Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild
Unauthenticated attackers exploit CVE-2026-89026 in Issabel PBX via forged JWT tokens to run OS commands; exploitation observed since September 9.
2
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
Attackers are actively exploiting CVE-2026-5430 (CVSS 10), a WSO2 JWT authentication bypass, to access enterprise API credentials and sensitive data.
4