CVE-2026-78357 - Insufficient Session Revocation for JWT Authentication
CVE ID :CVE-2026-78357 Published : Oct. 12, 2026, 7:16 a.m. | 15 minutes ago Description :Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain...