CVE-2026-88907

The software TÜBİTAK ULAKBİM UlakPDF contains an Incorrect Authorization vulnerability that enables an Authentication Bypass . This issue is specifically linked to a SAML ePPN Attribute Validation Bypass . The vulnerability affects versions through 09092026 . The impact includes high levels of co...

CVE-2026-88907 SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDF

Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authentication Bypass. This issue affects UlakPDF: through 09092026...

PT-2026-98035

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.7 authentik versions prior to 2026.5.7 authentik versions prior to 2026.8.2 Description An issue exists in the SAML Source where the system verifies the signature and validity period of an assertion but fails...

PT-2026-98036

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.7 authentik versions prior to 2026.5.7 authentik versions prior to 2026.8.2 Description An unauthenticated attacker can submit a malformed SAML message to a deployment using SAML in the identity-provider or...

PT-2026-98200

Name of the Vulnerable Software and Affected Versions ZITADEL versions 4.0.0 through 4.16.0 Description ZITADEL Login V2 creates a browser session immediately after password verification. This session can be reused for subsequent authentication requests without verifying a user's enrolled second...

CVE-2026-85056: Improper Authentication

ZITADEL is an open source identity management platform. From 4.0.0 until 4.16.1, ZITADEL Login V2 creates a browser session after password verification and can reuse that session for a later authentication request without verifying a user's enrolled TOTP, OTP, or U2F second factor. When the MFA...

CVE-2026-57175: Improper Authentication

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could...

CVE-2026-94613: Allocation of Resources Without Limits or Throttling

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in either the identity-provider or SAML source role. The message can stop the worker handling...

CVE-2026-94612: Improper Authentication

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authentik SAML Source verifies an assertion's signature and validity period but does not ensure that the identity provider issued the assertion for that Source or in response to a login request from that...

PT-2026-98187

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.0 Description The SAML backend accepts SAML responses on the Assertion Consumer Service endpoint without verifying that they match a previously issued AuthnRequest. This flaw allows an attacker with a...

WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...

kviklet v0.9.0

Kviklet Kviklet.dev | Release Notes | Discord Secure access to production environments without impairing developer productivity. Kviklet pronounced Quick-let applies the Four-Eyes Principle to production database access, with a pull request-like review and approval workflow for individual SQL...

CVE-2026-55210

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

CVE-2026-55210 Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

CVE-2026-55210

Joplin Server prior to 3.7.2 contains a vulnerability in UserModel.ssoLogin() where the method returns an existing account matched by an IdP-asserted email without checking the is_external flag . In deployments using mixed local and SAML authentication , an attacker whose IdP session can assert a...

EUVD-2026-84176

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

CVE-2026-55210 Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

CVE-2026-55210 Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

PT-2026-96278

Name of the Vulnerable Software and Affected Versions Joplin Server versions prior to 3.7.2 Description In deployments using mixed local and SAML authentication, the UserModel.ssoLogin function returns an existing account matched by an Identity Provider IdP-asserted email without verifying the...

CVE-2026-55210: Authentication Bypass by Spoofing

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...