Is CVE-2026-77130 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-77130

Description

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key.