CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

92 matches found

EUVD•added 2026/08/13 1:36 p.m.•20 views

EUVD-2026-57976

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

8.1CVSS5.2AI score0.00373EPSS

SaveExploits1References1

RedhatCVE•added 2026/08/05 1:44 p.m.•24 views

CVE-2026-16443

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

9.1CVSS5.8AI score0.00255EPSS

SaveExploits0References3

NVD•added 2026/08/03 2:16 p.m.•33 views

CVE-2026-18092

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because newfromxml reads assertion identity with document-wide XPath instead of the signed subtree. newfromxml reads the NameID, attribute values, SessionIndex, audience and other identity fields...

8.1CVSS0.00337EPSS

SaveExploits0References2

CVE•added 2026/07/31 6:38 a.m.•70 views

CVE-2026-18217

CVE-2026-18217 affects Keycloak’s SAML protocol implementation, specifically when handling SAML authentication requests via HTTP-Redirect binding with wildcard redirect URLs. The root cause is a query-string handling flaw that allows an attacker to craft a request whose parameters are preserved a...

4.7CVSS5.7AI score0.00332EPSS

SaveExploits0References2Affected Software1

Positive Technologies•added 2026/07/31 12:00 a.m.•32 views

PT-2026-66729

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the SAML protocol implementation when handling authentication requests via the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...

4.7CVSS5.7AI score0.00332EPSS

SaveExploits0References8

attackerkb•added 2026/07/10 7:55 p.m.•18 views

CVE-2026-55789

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's self-hosted SAML application IdP built the signed SAML response and assertion by string-substituting user-controlled profile attributes such as name, email, and custom attribute-mapping values into...

8.5CVSS6.1AI score0.00402EPSS

SaveExploits0References5Affected Software1

Cvelist•added 2026/07/10 7:54 p.m.•62 views

CVE-2026-54714 Logto: XSS via unescaped RelayState in SAML auto-submit form

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, @logto/core reflected the SAML RelayState, SAMLResponse, and actionUrl into a Logto-origin auto-submit HTML form in packages/core/src/saml-application/SamlApplication/utils.ts without HTML-attribute...

6.1CVSS0.00338EPSS

SaveExploits0References4

Vulnrichment•added 2026/07/10 7:54 p.m.•30 views

CVE-2026-54714 Logto: XSS via unescaped RelayState in SAML auto-submit form

6.1CVSS5.9AI score0.00338EPSS

SaveExploits0References4

EUVD•added 2026/07/10 5:25 p.m.•26 views

EUVD-2026-42964

ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL Login V2 OIDC and SAML FailedPrecondition error paths return loginSettings.defaultRedirectUri to router.push without applying the isSafeRedirectUri check, allowing an organization or instance administrator to store a...

7.3CVSS6AI score0.00379EPSS

SaveExploits0References3

NVD•added 2026/06/24 9:16 p.m.•31 views

CVE-2026-45677

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's SAML integration does not verify the signature on inbound LogoutRequest messages. An unauthenticated remote attacker who knows a...

8.7CVSS0.00683EPSS

SaveExploits0References1

Cvelist•added 2026/06/23 10:09 p.m.•56 views

CVE-2026-54588 Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled HTTPHOST request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An...

9.6CVSS0.00543EPSS

SaveExploits0References3

Vulnrichment•added 2026/06/21 6:30 p.m.•17 views

CVE-2026-12804 lemonldap-ng SAML Common Domain Cookie Endpoint CDC.pm redirect

A vulnerability was detected in lemonldap-ng up to 2.23.0. Impacted is an unknown function in the library lemonldap-ng-portal/lib/Lemonldap/NG/Portal/CDC.pm of the component SAML Common Domain Cookie Endpoint. Performing a manipulation of the argument url results in open redirect. The attack is...

5.3CVSS5.2AI score0.00446EPSS

SaveExploits0References4

Positive Technologies•added 2026/06/09 12:00 a.m.•33 views

PT-2026-48310

Name of the Vulnerable Software and Affected Versions Spring Security versions 5.7.0 through 5.7.23 Spring Security versions 5.8.0 through 5.8.25 Spring Security versions 6.3.0 through 6.3.16 Spring Security versions 6.4.0 through 6.4.16 Spring Security versions 6.5.0 through 6.5.10 Spring Securi...

9.8CVSS5.4AI score0.00181EPSS

SaveExploits0References187

CNNVD•added 2026/05/28 12:00 a.m.•38 views

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability, which stems from the possibility for remote, unauthenticated attackers to send specially crafted SOAP requests to the SAML ECP endpoint. These requests are accompanied ...

5.3CVSS5.8AI score0.00575EPSS

SaveExploits0References2

Positive Technologies•added 2026/05/28 12:00 a.m.•51 views

PT-2026-44427

Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 2.362.1 Description The SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to the "/api/acs" endpoint without verifying if it corresponds to a previously issued AuthnRequest...

9.1CVSS7.9AI score0.00211EPSS

SaveExploits0