MEDIUM

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

The Hacker News • Aug 19, 2026

MEDIUM

[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak

Exploit-DB • Aug 17, 2026

HIGH

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

Rapid7 Research • Aug 11, 2026

LOW

CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Microsoft Security Response Center • Aug 08, 2026

HIGH

tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open

Reddit r/netsec • Aug 07, 2026

HIGH

Pentesting vibe-coded applications: JWT flaws, exposed secrets, and broken authorization

Reddit r/netsec • Jul 25, 2026

HIGH

Rockwell Automation FactoryTalk Services Platform

CISA All Advisories • Jul 21, 2026

CRITICAL

Siemens Opcenter X

CISA All Advisories • Jul 21, 2026

HIGH

NCSC-2026-0251 [1.00] [M/H] Kwetsbaarheden verholpen in IBM Langflow OSS

NCSC Netherlands • Jul 21, 2026

HIGH

USN-8557-1: Authlib vulnerabilities

Ubuntu Security • Jul 16, 2026

MEDIUM

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

The Hacker News • Jul 16, 2026

CRITICAL

CVE-2026-50160: Four Independent Weaknesses Combine Into a CVSS 10.0 Full Compromise in Hoppscotch

Reddit r/netsec • Jun 23, 2026

HIGH

NCSC-2026-0095 [1.00] [M/H] Kwetsbaarheid verholpen in pac4j-jwt

NCSC Netherlands • Mar 12, 2026

CRITICAL

we at codeant found a bug in pac4j-jwt (auth bypass)

Reddit r/netsec • Mar 05, 2026

CRITICAL

VU#458022: Open5GS WebUI uses a hard-coded secrets including JSON Web Token signing key

CERT/CC • Jan 20, 2026