CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API EXAMPLE & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" If this proves useful to anyone I will develop further with the...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3055 - out-of-bounds read memory overread vulnerability in NetScaler ADC an...

check-cve-2026-3055-netscaler

CVE-2026-3055 NetScaler SAML IdP check Python helper to probe Citrix NetScaler / NetScaler Gateway appliances for CVE-2026-3055 memory overread when acting as a SAML Identity Provider. Detection logic matches the public write-up from watchTowr Labs. Prerequisites Python 3.10+ Only applies to...

CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CVSS: N/A Impact: N/A Published: 2026-03-23 Legal For authorized security testing only. Root Cause short version Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

CVE-2026-89209

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

CVE-2026-89209

The Mendix SAML module is vulnerable to SAML assertion replay in IdP-initiated authentication flows. This flaw affects Mendix 10 compatible versions prior to V4.2.4 , Mendix 11 compatible versions prior to V4.2.4 , and Mendix 9 compatible versions prior to V3.6.29 . An unauthenticated remote atta...

CVE-2026-89209

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

CVE-2026-89209

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

EUVD-2026-109739

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

Siemens Mendix SAML Module

SUMMARY Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and...

PT-2026-123279

Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...

RHEL 10 : sssd (RHSA-2026:77534)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77534 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...

CVE-2026-102631 authd: Account takeover via username fallback in identity matching after IdP email reassignment

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

CVE-2026-102631 authd: Account takeover via username fallback in identity matching after IdP email reassignment

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...

freeIPA: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the corresponding LDAP access control check is enforced. This allows any authenticated IPA principal, regardless of privilege level, to enumerate an...