Exploit for CVE-2026-29000

kitploit · 2026-08-27

Description

Pac4j JWT authentication bypass via public key enabling CVE-2026-29000 exploitation.

Entry point

ParameterAuthorization · header

Path/api/admin/dashboard

Admin-restricted endpoint accessible with forged unsigned JWT via JWE bypass.

All known vulnerabilities by product

CVSS 9.3 for CVE-2026-29000

9.3

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:N/SA:N

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

5.9%higher than 92.7% of all CVEs

Updated 2026-08-29

CVE Information

Exploit Details

Modified:2026-08-27 02:34

Last Seen:2026-08-27 23:59

Reporter:KitPloit

Tags

Pac4jJWTauthentication bypasspublic keyPoC exploit

Other exploits for CVE-2026-29000

2026-08-29 KitPloitKITPLOIT

CVE-2026-29000-PoC-Exploit

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2026-24061-PoC-Exploit

2026-08-28 KitPloitKITPLOIT

CVE-2026-41940-PoC-Exploit

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CRIMS-ON-CVE-2026-29000
Script semplice che sfrutta CVE-2026-29000. Tutto ciò di cui hai bisogno è la chiave pubblica in formato PEM e puoi usarlo.

Per maggiori informazioni sulla vulnerabilità leggi: https://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key