HIGHVulnerability
CVE-2026-82463
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks.
Properties
- severity
- HIGH
- score
- 8.1
- epss_score
- 0.00304
- cve_id
- CVE-2026-82463
- vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- published_at
- 2026-08-29T17:17:58.490
- last_modified
- 2026-09-02T19:18:06.810
- epss_percentile
- 0.2277
Related Entities (3)
ENRICHED_BY (1)
→[Source]FIRST EPSS
HAS_WEAKNESS (1)
→[Weakness]Incorrect Authorization
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph