Exploit for CVE-2026-29000

kitploit · 2026-08-27

Description

CVE-2026-29000 in a tools repository that has no README.

Entry point

ParameterAuthorization · header

Path/api/admin/dashboard

Admin-restricted endpoint accessible with forged unsigned JWT via JWE bypass.

All known vulnerabilities by product

Pac4J-Jwt

CVSS 9.3 for CVE-2026-29000

9.3

HIGH SEVERITY

Version 4.0

VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:H/SI:N/VA:N/SA:N

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

5.9%higher than 92.7% of all CVEs

Updated 2026-08-29

CVE Information

CVE-2026-29000

Exploit Details

Modified:2026-08-27 01:19

Last Seen:2026-08-27 22:41

Reporter:KitPloit

Other exploits for CVE-2026-29000

CVE-2026-29000

2026-08-29 KitPloitKITPLOIT

CVE-2026-29000-PoC-Exploit

2026-08-28 KitPloitKITPLOIT

CVE-2026-29000

2026-08-28 KitPloitKITPLOIT

CVE-2026-29000

2026-08-28 KitPloitKITPLOIT

CVE-2026-24061-PoC-Exploit

2026-08-28 KitPloitKITPLOIT

CVE-2026-41940-PoC-Exploit

2026-08-28 KitPloitKITPLOIT

CVE-2026-29000

2026-08-27 KitPloitKITPLOIT

cve-2026-29000

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-GAJRAJ238-CVE-2026-29000
Este repositorio nao tem um README.

Exploit Code

Share

Share on social media: