Is CVE-2026-82463 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82463?

CVE-2026-82463 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-82463

Description

pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks.