Impact of CVE-2026-29000 on Endpoint Protection

Products

• Endpoint Protection

Issue/Introduction

Is Symantec Endpoint Protection Manager (SEPM), or SEP client impacted by pac4j-jwt related vulnerability CVE-2026-29000?

Resolution

There is no impact of CVE-2026-29000 on SEPM or SEP clients.

SEPM does not depend on pac4j-jwt, it uses the Nimbus JOSE+JWT library directly.

Installation of SEP does not deploy this library on the client system (Windows, Linux or macOS).