WhisperX tag archive

#JWT vulnerability

This page collects WhisperX intelligence signals tagged #JWT vulnerability. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-04-04 20:26:54 · GitHub Issues

1. Critical JWT Algorithm 'None' Bypass Exposes Admin Login to Token Forgery

A critical security flaw allows attackers to forge valid authentication tokens and bypass JWT security entirely by exploiting a misconfigured server that accepts the 'none' algorithm. The vulnerability, confirmed with 90% confidence and rated a CVSS 9.8, was discovered on the `/admin/login` endpoint, where the server i...

#cybersecurity#authentication bypass#JWT vulnerability#admin access#CWE-345