Cwe-354

Apache APISIX `jwe-decrypt` Integrity-Check Bypass → Unauthenticated Gateway Auth Bypass (CVE-2026-49230) newCVE-2026-49230webCRITICAL 9.1Patched2026-07-27