← Database

CVE-2026-36721

CRITICAL CVSS: 9.8 Published: 2026-06-09 Modified: 2026-07-23

Description

A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.

Affected Platforms

Unknown

Weakness Type

CWE-347

References