CVE-2026-49283

SimpleSAMLphp SAML2 (PHP library) is vulnerable to a TLS validator confusion in the HTTPArtifact::receive() flow. The embedded SAML Response receives a validator that delegates to the outer SOAP ArtifactResponse, but is validated against metadata selected from the embedded response issuer rather ...