CVE-2026-82463 - pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
Brief
CVE ID : CVE-2026-82463
Published : Aug. 29, 2026, 5:17 p. m.
- 3 hours, 57 minutes ago
Description : pac4j-core before 6.
- 6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks.
Severity: 8.1
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...