CVE-2022-25262

CVE-2022-25262 CVE-2022-25262 の PoC + 脆弱性詳細 | JetBrains Hub シングルクリック SAML レスポンス乗っ取り CVE-2022-25262 要件 使用方法 仕組み 「OAuth2 - SAML」交換のための認可コードプール YouTrack Konnector OAuth2 認可コードの奪取（仕様による） 緩和策 要件 JetBrains Hub 2022.1.14434 SAML IdP として構成された JetBrains Hub 「YouTrack Konnektor」サービスがインストールされていること（YouTrack...

CVE-2022-47966

CVE-2022-47966 CVE-2022-47966に影響を受ける以下のManageEngine製品向けのPOC： Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint Central MSP Endpoint DLP...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 認証バイパス PoC CVE-2026-15013 の概念実証（PoC）: miniOrange 製 WordPress プラグイン SAML Single Sign On – SSO Login （バージョン 5.4.3 以下 ）における、SAML の 署名アルゴリズム混同 （HMAC-SHA1）を利用した未認証の認証バイパス。 許可されたテストのみ。 このコードは、自分が所有するシステム、または明示的な許可を得たシステムに対してのみ使用してください。コンピュータシステムへの不正アクセスは違法です...

CVE-2026-15640 Authentication Bypass via SAML Response Manipulation

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...

Astra Linux – Vulnerability in Lasso

There is a denial-of-service vulnerability in the lassoproviderverifysamlsignature functionality of Entr’ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial-of-service attack. An attacker can send a malformed SAML response to exploit this vulnerability...

Astra Linux – Vulnerability in Lasso

There is a denial-of-service vulnerability in the lassonodeinitfrommessagewithformat functionality of Entr’ouvert Lasso 2.5.1. A specially crafted SAML response can lead to memory depletion, resulting in a denial-of-service attack. An attacker can send a malformed SAML response to exploit this...

CVE-2026-75800 Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts...

CVE-2026-75800

The Frontegg SAML SSO WordPress plugin (versions ≤ 1.0.1 ) fails to verify the signature or issuer of SAML authentication responses before establishing a session. This allows unauthenticated attackers to log in as any user—including administrators—and to create arbitrary accounts, effectively an ...

CVE-2026-73784 HPE IceWall products, Remote Bypass of Security Restrictions

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

CVE-2026-73784

A SAML response tampering vulnerability in HPE IceWall products (MFA 4.0 Enterprise/Standard Edition SAML Authentication Option, Federation Agent 4.0, and Federation Proxy 4.0) allows a remote attacker with low privileges to impersonate another user by bypassing security restrictions. HPE rates t...

CVE-2026-73784 HPE IceWall products, Remote Bypass of Security Restrictions

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

EUVD-2026-75975

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

PT-2026-89778

🚨 HIGH SEVERITY: CVE-2026-73784 CVSS 8.8 HPE IceWall SAML response tampering vulnerability allows attackers to impersonate users. Network-exploitable with low complexity. Affected: HPE IceWall products Impact: Full compromise C/I/A: High CVE PatchNow https://t.co/BIQ1Jg5WsS...

EUVD-2026-70411

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

DEBIAN-CVE-2026-49283

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-49283

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-19842

The WordPress SAML Single Sign On plugin (versions 4.8.85–5.4.6) fails to verify SAML response signatures before storing certificates, then exposes a one-click admin control that promotes any stored certificate to the trusted signing anchor. An unauthenticated attacker can submit a self-signed ce...

picketlink-federation: picketlink SAML 2.0 auth bypass via missing assertions

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application...

CVE-2026-15981 SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mosamlvalidatesignature function performing a loose boolean check on the raw tri-state integer returned by PHP's opensslverify, causing a...

PT-2026-64168

Name of the Vulnerable Software and Affected Versions SAML Single Sign On – SSO Login versions prior to 5.4.5 Description An authentication bypass exists due to the mo saml validate signature function performing a loose boolean check on the integer returned by PHP's openssl verify. An error retur...