← Database

CVE-2026-36727

CRITICAL CVSS: 9.1 Published: 2026-06-09 Modified: 2026-07-23

Description

An insecure authentication vulnerability in the /api/social-sign-in endpoint of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.

Affected Platforms

Unknown

Weakness Type

CWE-287

References