tag
Alg-None
Critical
SimpleHelp OIDC Authentication Bypass via Unverified JWT Signature (CVE-2026-48558)
CVE-2026-48558·
SimpleHelp — remote support / RMM (remote monitoring and management) platform, OIDC authentication flow
patched
Critical
SimpleHelp OIDC Authentication Bypass (CVE-2026-48558)
CVE-2026-48558·
SimpleHelp remote support / remote monitoring & management (RMM) server, OIDC authentication flow
patched
Critical
pac4j JWT Authentication Bypass via Unsigned Token in JWE Wrapper — CVE-2026-29000
CVE-2026-29000·
pac4j (JWT authentication module), used in Java web applications
unpatched
High
Nextcloud user_oidc ID4me JWT Signature Bypass (CVE-2026-45156)
CVE-2026-45156·
Nextcloud user_oidc app — ID4me identity provider integration
unpatched