CVE-2026-75759 | erlef oidcc 3.2.0-beta.1 JARM data authenticity

August 30, 2026 Yanac

A vulnerability labeled as critical has been found in erlef oidcc 3.2.0-beta.1. Affected by this vulnerability is the function oidcc_jwt_util.verify_decrypted_token/oidcc_token.int_validate_jwt of the component JARM Handler. Executing a manipulation can lead to insufficient verification of data authenticity.

This vulnerability appears as CVE-2026-75759. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More