CVE-2026-39793: CWE-288 Authentication Bypass Using an Alternate Path or Channel in Nicu Micle Simple JWT Login

This vulnerability (CVE-2026-39793) affects Simple JWT Login version 4.0.0 by Nicu Micle. It is categorized as CWE-288, indicating an authentication bypass via an alternate path or channel. The CVSS 3.1 score is 8.8 (high), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory information is provided, so patch status is unknown.

Successful exploitation allows an attacker with low privileges to bypass authentication controls, leading to full compromise of the system's confidentiality, integrity, and availability. This can result in unauthorized access and control over the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected version and monitor for suspicious activity related to authentication bypass attempts.