Lucene search
+L

2917 matches found

NVD
NVD
added 2026/03/18 2:16 a.m.14 views

CVE-2026-2603

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

8.1CVSS0.00425EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2026/03/18 1:14 a.m.37 views

CVE-2026-2603 Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

8.1CVSS0.00425EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/03/18 1:14 a.m.7 views

CVE-2026-2603

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

8.1CVSS5.8AI score0.00425EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2026/03/18 1:14 a.m.6 views

CVE-2026-2603 Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

8.1CVSS5.8AI score0.00425EPSS
SaveExploits1References6
CVE
CVE
added 2026/03/18 1:14 a.m.188 views

CVE-2026-2603

CVE-2026-2603 affects Keycloak: an attacker can bypass security by sending a valid SAML response from an external IdP to the Keycloak SAML endpoint for IdP-initiated broker logins, enabling unauthorized authentication. The issue is described across multiple sources (NVD/EUVD/GHSA) with a CVSS v3....

8.1CVSS5.8AI score0.00425EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2026/03/18 1:14 a.m.72 views

CVE-2026-2092 Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

7.7CVSS0.00307EPSS
SaveExploits0References6
CVE
CVE
added 2026/03/18 1:14 a.m.107 views

CVE-2026-2092

Keycloak SAML broker endpoint vulnerability: encrypted SAML assertions are not properly validated when the overall SAML response is unsigned. An attacker with a valid signed SAML assertion can craft a malicious SAML response to inject an encrypted assertion for an arbitrary principal, leading to ...

7.7CVSS5.8AI score0.00307EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/18 12:00 a.m.19 views

PT-2026-25968

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A security bypass exists in Keycloak where a remote attacker can circumvent security measures by submitting a valid Security Assertion Markup Language SAML response from an external Identity...

8.1CVSS5.8AI score0.00425EPSS
SaveExploits1References21
Trellix
Trellix
added 2026/03/18 12:00 a.m.21 views

Dark Web Roast February 2026 Edition

Dark Web Roast - February 2026 Edition By Trellix Advanced Research Center · March 18, 2026 Executive Summary February 2026 delivered another stellar month in the ongoing theatre of the absurd that is the cybercriminal underground, where ransomware gangs bulk-scheduled their extortion like a...

9.8CVSS6.4AI score0.04478EPSS
SaveExploits1
EUVD
EUVD
added 2026/03/12 12:30 p.m.25 views

EUVD-2026-11557

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...

9.8CVSS6.3AI score0.01534EPSS
SaveExploits1References4
NVD
NVD
added 2026/03/12 12:15 p.m.12 views

CVE-2026-3059

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...

9.8CVSS0.01534EPSS
SaveExploits1References5
OSV
OSV
added 2026/03/12 11:37 a.m.11 views

CVE-2026-3059 CVE-2026-3059

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...

9.8CVSS7.5AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/03/12 11:37 a.m.6 views

CVE-2026-3059 CVE-2026-3059

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...

6.3AI score0.01534EPSS
SaveExploits1References5
CVE
CVE
added 2026/03/12 11:37 a.m.44 views

CVE-2026-3059

CVE-2026-3059 affects SGLang’s multimodal generation module via the ZMQ broker, where unauthenticated data can be deserialized with pickle.loads(), enabling remote code execution. The vulnerability arises from deserializing untrusted data without authentication. The provided documents do not spec...

9.8CVSS6.3AI score0.01534EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/12 11:37 a.m.17 views

CVE-2026-3059

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...

9.8CVSS6.3AI score0.01534EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/12 12:00 a.m.32 views

PT-2026-24941

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description The SGLang multimodal generation module is susceptible to unauthenticated remote code execution. This occurs through the ZMQ broker, which deserializes untrusted data using the pickle.loads...

9.8CVSS7.3AI score0.01534EPSS
SaveExploits1References19
EUVD
EUVD
added 2026/03/11 6:30 p.m.14 views

EUVD-2026-11251

An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting. The attacker must have network access to the Broke...

8.4CVSS5.8AI score0.00171EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/11 6:16 p.m.14 views

CVE-2026-0231

An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting. The attacker must have network access to the Broke...

8.4CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/11 6:03 p.m.7 views

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting. The attacker must have network access to the Broke...

8.4CVSS5.8AI score0.00171EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/11 6:03 p.m.6 views

CVE-2026-0231

An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting. The attacker must have network access to the Broke...

8.4CVSS5.8AI score0.00171EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder