{"vulnerability": "CVE-2026-96760", "sightings": [{"uuid": "1b26a9cb-efdf-426f-ae2f-e4d15f2104a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmq7gsbjq2c", "content": "An Authlib signature bypass vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge JWS payloads. Update libraries now.\n\n#Authlib #CVE202696760 #Cybersecurity #JWS #Vulnerability", "creation_timestamp": "2026-09-29T02:00:09.937178Z"}, {"uuid": "016fca5e-0aa6-4aa9-819e-62c55cdfe9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mwnkqbqft224", "content": "\u3010\u4fee\u6b63\u7248\u306a\u3057\u3011Authlib \u306b\u7f72\u540d\u691c\u8a3c\u306e\u56de\u907f\uff08CVE-2026-96760\uff09\u3002signatures \u304c\u7a7a\u914d\u5217\u306eJWS\u3092\u300c\u691c\u8a3c\u6e08\u307f\u300d\u3068\u3057\u3066\u8fd4\u3057\u307e\u3059\u3002\u9375\u3082\u7f72\u540d\u3082\u8981\u308a\u307e\u305b\u3093\u3002\n\nCVE\u306f\u300c1.7.2\u4ee5\u4e0b\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u304c\u3001jws.py \u306f v1.7.2\u30fbv1.8.0\u30fbmaster \u3067\u540c\u4e00\u30d5\u30a1\u30a4\u30eb\u3067\u3057\u305f\u3002\u5bfe\u8c61\u306fJWS\u306eJSON\u5f62\u5f0f\u3092\u53d7\u3051\u53d6\u308b\u7d4c\u8def\u3060\u3051\u3067\u3001jwt.decode() \u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/aut...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-29T09:54:54.138876Z"}, {"uuid": "54e73b92-eb87-4a8c-a41d-53548d2227c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5brd6xq2m", "content": "CVE-2026-96760 - authlib\nThe Authlib software (versions up to 1.7.2) may treat data as securely signed even when no signature is present. This lets an attacker create fake authentication tokens that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#authlib #UbuntuPro2204LTS #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:05.525780Z"}, {"uuid": "52871d0a-19f6-4d51-86a4-5c072f602e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "73bbe3ff-b1e6-4320-b851-ce337944f46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwvho4reo72d", "content": "Explore Authlib CVE-2026-96760, an authentication bypass vulnerability involving empty JSON Web Signature arrays in Python. Learn how to secure your apps.\n\n#Authlib #Cybersecurity #CVE202696760 #AuthenticationBypass #PythonSecurity", "creation_timestamp": "2026-10-02T13:21:16.857392Z"}, {"uuid": "1b4d1baa-98c0-4b41-a997-b51f3fcc2ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "published-proof-of-concept", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}]}