CVE-2026-86304

MojoX::Authentication (Perl) versions before 0.006 are vulnerable to a SAML authentication bypass . The root cause lies in parse_assertion within MojoX::Authentication::Model::SAML2, which calls Net::SAML2::Binding::POST->new without a cacert, cert_text, or anchors argument. In Net::SAML2 befo...