CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

EUVD-2026-72850

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

CVE-2026-79577

The sso-master v1.0.0 application contains a vulnerability in its /cas/login component. This flaw allows an attacker to bypass authentication and gain access to the application without a password by sending a crafted POST request . Detailed information regarding the specific root cause, exploitab...

CVE-2026-79577: Improper Access Control

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

CVE-2026-79576: Improper Authentication

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

EUVD-2026-72848

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

zitadel v4.17.3

The Identity Infrastructure for Developers ZITADEL...

CVE-2026-12704

On Grafana Enterprise instances with the optional IdP-initiated SAML single sign-on enabled allowidpinitiated = true, disabled by default, Grafana did not fully validate the InResponseTo field of SAML responses. An attacker who obtained a valid, signed SAML assertion for a user could replay it...

CVE-2026-80465

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

CVE-2026-80465

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

CVE-2026-80465

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

CVE-2026-80465

CVE-2026-80465 affects the Mendix SAML module across multiple compatibility lines: Mendix 10 (all versions < V4.2.3), Mendix 11 (all versions < V4.2.3), and Mendix 9.24 (all versions

linux-entra-sso-PoC

Summary CVE status: requested, pending assignment. This...

CVE-2026-80465: Improper Verification of Cryptographic Signature

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

Siemens Mendix SAML

SUMMARY Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...

PT-2026-84983

Name of the Vulnerable Software and Affected Versions Mendix SAML Mendix 10 compatible versions prior to 4.2.3 Mendix SAML Mendix 11 compatible versions prior to 4.2.3 Mendix SAML Mendix 9.24 compatible versions prior to 3.6.27 Description Certain versions of the Mendix SAML module fail to proper...

CVE-2026-82183

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...

EUVD-2026-69861

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...

CVE-2026-82183

The OAuth Single Sign On WordPress plugin, in versions 6.25.0 through 7.0.0 , contains an improper authentication vulnerability. The plugin fails to verify the identity assertion returned during its Steam single sign-on flow . This flaw allows unauthenticated attackers to perform an unauthenticat...