3942 matches found
CVE-2026-23933
In Zabbix 7.4, the frontend session signing key was erroneously written to the database seed. When SAML authentication and guest users are both enabled, this key can be extracted and used to forge valid session cookies, enabling unauthorized access. CVSS 4.0 scores this HIGH (7.7). The Zabbix tic...
EUVD-2026-60737
In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid...
PT-2026-76959
Name of the Vulnerable Software and Affected Versions Zabbix version 7.4 Description The cryptographic key used for signing Frontend sessions is incorrectly written to the database seed. This issue affects deployments that simultaneously use SAML authentication and guest users, allowing the key t...
Improper Verification Of Cryptographic Signature
Spring Security is vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is due to SAML Responses and LogoutRequest/LogoutResponse elements being decrypted without requiring a valid signature, which allows an attacker to craft malicious SAML payloads and use the Servic...
Deserialization Of Untrusted Data
Spring Security is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to malicious serialized payloads being stored in verificationcredentials or encryptioncredentials by an attacker with write access to the saml2assertingpartymetadata table managed by...
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
EUVD-2026-57976
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979
CVE-2026-61979 affects the WordPress SAML SP Single Sign On plugin (≤ 5.4.3). It enables unauthenticated privilege escalation, per the NVD/CVE records and CVE listings. The provided documents do not specify the exact exploit vector, affected versions beyond ≤ 5.4.3, or remediation steps (e.g., pa...
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-12263
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...
CVE-2026-12263
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...
CVE-2026-12263
CVE-2026-12263 affects Zohocorp ManageEngine Password Manager Pro <13232 and PAM360
EUVD-2026-57776
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...
CVE-2026-12263 Authentication Bypass
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...
CVE-2026-73305
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:26+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-j9fc-w3mr-x6mv 2026-08-14 01:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msyxhdipyh26...
CVE-2026-68757
A user with access to a valid SAML response may impersonate another user under specific conditions...