Detections
Analytics
CVE-2026-36721
critical
Description
A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.
References
https://github.com/CC-T-454455/Vulnerabilities/tree/master/bookcars/vulnerability-2