CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WSO2 JWT Authentication Bypass and Account Takeover (CVE-2026-5430)
[Affected Scope] WSO2 Identity Server, API Manager, and products utilizing WSO2 JWT authentication modules.
[Impact] Attackers can bypass authentication using crafted JWTs, leading to full administrative account takeover.
[Mitigation] Apply official vendor patches immediately and enforce strict JWT algorithm validation policies.
Microsoft SharePoint Weak Authentication Bypass Vulnerability (CVE-2026-55040) Security Advisory
[Affected Scope] Microsoft SharePoint Server on-premises deployments
[Impact] Unauthenticated remote attackers can bypass security features over the network to access sensitive data or escalate privileges
[Mitigation] Apply the official Microsoft security updates immediately and restrict external network exposure until patched
ONLYOFFICE Document Server Remote Code Execution (RCE) Advisory (CVE-2021-3199)
[Affected Scope] ONLYOFFICE Document Server versions prior to 5.6.3 (when JWT is enabled)
[Impact] Attackers can achieve Remote Code Execution (RCE) by uploading malicious files to arbitrary directories.
[Mitigation] Immediately update ONLYOFFICE Document Server to version 5.6.3 or later.