CVE-2026-123550

OpenAM versions before 16.1.4 are vulnerable to an authentication bypass in the SAML v2.0 service provider. The root cause is the acceptance of unsigned assertions on ECP (PAOS) and HTTP-Artifact bindings when the WantAssertionsSigned parameter is set to false. This allows unauthenticated remote ...

CVE-2026-123548

OpenIdentityPlatform OpenAM versions prior to 16.1.4 are vulnerable to an open redirect vulnerability. The root cause is that several pages—including WS-Federation logout , SAML v2.0 logout , name-identifier management , SAML v2.0 identity provider finder , and specific authentication pages—fail ...

CVE-2026-123547

OpenAM versions prior to 16.1.4 are vulnerable to an open redirect vulnerability via SAML v2.0 RelayState . The root cause is that the RelayState parameter is not validated when no relayStateUrlList is configured. Attackers can craft malicious single sign-on links to redirect users from the trust...

FusionAuth SAML v 2 0.2.3 Message Forging Vulnerability

Unauthenticated users can send forged messages to the FusionAuth to bypass authentication, impersonate other users or gain arbitrary roles. The SAML message can be send to the application without a signature even if this is required. The impact depends on individual applications that implement...