CVE-2026-78425 SAML Audience Confusion Allows Cross-SP Authentication

Authorised users of outside applications behind the same corporate identity provider IdP, for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on can log into their system via SAML SSO. The IdP issues an assertion to them. If that assertion is...

CVE-2026-78425

NeuVector is vulnerable to a SAML Audience Confusion flaw that allows cross-Service Provider (SP) authentication . When an authorized user of any other application behind the same corporate IdP (e.g., a wiki or ticketing system) obtains a SAML assertion, they can present that assertion to NeuVect...

CVE-2026-30863-Exploit

CVE-2026-30863 – Parse Server JWT Audience 検証 影響を受けるバージョン Parse Server 8.6.10 および 9.5.0-alpha.11 脆弱なコンポーネント Google 認証アダプター（GoogleAuthAdapter） Apple 認証アダプター（AppleAuthAdapter） Facebook 認証アダプター（FacebookAuthAdapter） 根本原因 アダプターが audience パラメータ（Google/Apple の場合は clientId、Facebook の場合は appIds）を設定せずに...

CVE-2026-86466

Apache Airflow FAB provider (apache-airflow-providers-fab) contains an authentication bypass in the Authentik OAuth path of its FAB auth manager. The issuer and audience claims of the accepted id_token are not validated, allowing an attacker who holds a valid token minted by the same Authentik id...

EUVD-2026-80327

Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the idtoken it accepts. An attacker holding a token that the same Authentik identity provider minted for a different client application can present it to Airflow and be...

CVE-2026-83121

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of...

CVE-2026-83110

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

CVE-2026-83084

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...

CVE-2026-83083

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...

CVE-2026-83082

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

CVE-2026-83121

Oracle Marketing (component: Audience ) in Oracle E-Business Suite is vulnerable to a network-accessible flaw exploitable via HTTP by a low-privileged attacker with no user interaction. Successful exploitation can result in full takeover of the Oracle Marketing component. Supported versions 12.2....

EUVD-2026-79449

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of...

CVE-2026-83110

Oracle Marketing (component: Audience ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can gain unauthorized access to critical data or complete access to all Oracle Marketing a...

EUVD-2026-79438

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

CVE-2026-83084

CVE-2026-83084 affects the Oracle Marketing product of Oracle E-Business Suite, specifically the Audience component, in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with no user interaction and low complexity. Th...

EUVD-2026-79412

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...

CVE-2026-83082

This vulnerability affects the Audience component of Oracle Marketing within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit it to achieve full takeover of the Oracle Marketing module, with high impact on confidential...

CVE-2026-83083

Oracle Marketing (component: Audience ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The changed scope means attacks may significantly impact...

EUVD-2026-79410

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks o...

EUVD-2026-79411

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...