CVE-2026-82463 – pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check

​CVE ID :CVE-2026-82463

Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago

Description :pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More