Alg-None

SimpleHelp OIDC Authentication Bypass via Unverified JWT Signature (CVE-2026-48558) new KEV EPSS 12%CVE-2026-48558webCRITICAL 10Patched2026-07-19SimpleHelp OIDC Authentication Bypass (CVE-2026-48558) new KEV EPSS 12%CVE-2026-48558webCRITICAL 9.8Patched2026-07-05pac4j JWT Authentication Bypass via Unsigned Token in JWE Wrapper — CVE-2026-29000 newCVE-2026-29000webCRITICAL 9.8Patched2026-07-05Nextcloud user_oidc ID4me JWT Signature Bypass (CVE-2026-45156) newCVE-2026-45156webHIGH 8.1Patched2026-07-05