CLEANSTART-2026-YS58315 In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS

Security vulnerability affects the wildfly package. In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS...

CVE-2026-89209

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

CVE-2026-89209

The Mendix SAML module is vulnerable to SAML assertion replay in IdP-initiated authentication flows. This flaw affects Mendix 10 compatible versions prior to V4.2.4 , Mendix 11 compatible versions prior to V4.2.4 , and Mendix 9 compatible versions prior to V3.6.29 . An unauthenticated remote atta...

CVE-2026-89209

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

EUVD-2026-109739

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

CVE-2026-89209

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.4, Mendix SAML Mendix 11 compatible All versions V4.2.4, Mendix SAML Mendix 9 compatible All versions V3.6.29. Affected versions of the module do not properly protect against SAML assertion replay in...

PT-2026-123279

Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.4 Mendix SAML Mendix 11 compatible versions prior to 4.2.4 Mendix SAML Mendix 9 compatible versions prior to 3.6.29 Description The module fails to properly protect against SAML assertion...

Siemens Mendix SAML Module

SUMMARY Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and...

CVE-2026-116201

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...

EUVD-2026-109459

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...

CVE-2026-116201 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...

CVE-2026-116201 Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...

CVE-2026-116201

The software Snipe-IT versions before 8.5.0 is vulnerable to a SAML assertion replay vulnerability. The root cause is a non-atomic nonce check within the SAML acs handler , which creates a race condition . By sending concurrent POST requests to /saml/acs using a single captured assertion, an atta...

PT-2026-123042

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple...

CVE-2026-115546

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

CVE-2026-115546 Authentication Source Verification Issue in Okta Access Gateway

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

EUVD-2026-108568

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

CVE-2026-115546 Authentication Source Verification Issue in Okta Access Gateway

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

CVE-2026-115546

The Okta Access Gateway (OAG) contains an authentication source verification issue. The system fails to validate the selected authentication source during sign-on, allowing an authenticated user with an active session to modify the authentication source parameter. This vulnerability may result in...

PT-2026-121738

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...