Pac4j โ€” PoC Archivehttps://poc.intelseclab.com/tags/pac4j/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000pac4j JWT Authentication Bypass via Unsigned Token in JWE Wrapper โ€” CVE-2026-29000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29000-pac4j-jwt-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29000-pac4j-jwt-auth-bypass/Critical severity (CVSS 9.8) โ€” web ยท CVE-2026-29000. Status: Weaponized. Affects: pac4j (JWT authentication module), used in Java web applications. Tags: pac4j, jwt, jwe, auth-bypass, alg-none, jwks, privilege-escalation, java.webCriticalpac4jjwtjweauth-bypassalg-nonejwksprivilege-escalationjava