CVE-2022-25262

CVE-2022-25262 PoC + vulnerability details for CVE-2022-25262 | JetBrains Hub single-click SAML response takeover CVE-2022-25262 Requirements Usage How does it work? Authorization code pool for "OAuth2 - SAML" exchange YouTrack Konnector OAuth2 authorization code takeover by design Mitigation...

CVE-2022-47966

CVE-2022-47966 POC for CVE-2022-47966 affecting the following ManageEngine products: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC Proof-of-concept for CVE-2026-15013 : unauthenticated authentication bypass via SAML Signature Algorithm Confusion HMAC-SHA1 in the miniOrange SAML Single Sign On – SSO Login WordPress plugin versions up to and including 5.4.3. Authoriz...

EUVD-2026-125164

Fleet before 4.86.2 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory through quadratic XML canonicalization of unsigned SAML responses. Attackers can send a single crafted SAML response with deeply nested elements declaring new namespace...

CVE-2026-126401

Versions of Fleet prior to 4.86.2 are vulnerable to an unauthenticated Denial of Service (DoS) attack. The root cause is quadratic XML canonicalization of unsigned SAML responses. An attacker can crash the Fleet server by sending a single crafted SAML response containing deeply nested elements wi...

EUVD-2026-123850

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

EUVD-2026-123851

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126177

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126176

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126177

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126176

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126177

An XML Injection (specifically Blind XPath Injection ) vulnerability exists in FortiAnalyzer , FortiAnalyzer Cloud , FortiManager , and FortiManager Cloud across multiple versions (including 8.0.0, 7.6.x, 7.4.x, and 7.2.x). This vulnerability allows an unauthenticated remote attacker to inject ar...

CVE-2026-126176

A XML injection (specifically Blind XPath Injection , CWE-91) vulnerability exists in several Fortinet products, including FortiAnalyzer , FortiAnalyzer Cloud , FortiManager , and FortiManager Cloud . The flaw allows an unauthenticated remote attacker to inject arbitrary content into a signed SAM...

PT-2026-145502

Name of the Vulnerable Software and Affected Versions FortiAnalyzer version 8.0.0 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer versions 7.2.0 through 7.2.12 FortiAnalyzer Cloud version 8.0.0 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7...

CVE-2026-126176: Fortinet: A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through…

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

PT-2026-145503

Name of the Vulnerable Software and Affected Versions FortiAnalyzer version 8.0.0 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer versions 7.2.0 through 7.2.12 FortiAnalyzer Cloud version 8.0.0 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7...

CVE-2026-126177: Fortinet: A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through…

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

XML injection

An XML Injection aka Blind XPath Injection vulnerability CWE-91 in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests...

GPUStack authorization issue vulnerability

A security vulnerability exists in GPUStack versions 0.7.1 through 2.2.2. This vulnerability arises because the /auth/saml/callback endpoint fails to validate the signature, issuer, audience, destination, or timestamp conditions of a SAML response before issuing a gpustacksession JWT. Additionall...

VulnCheck KEV: CVE-2026-19842

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...