CVE Catalog
CVE-2026-36721
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.
Risk Assessment
An attacker can impersonate any user, gaining unauthorized access to application features and data.
Recommendation
Update bookcars to a version that fixes JWT token signature verification.
Original NVD description (English source)
A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.