425 matches found
conftest
Conftest Conftest helps you write tests against structured configuration data. Using Conftest you can write tests for your Kubernetes configuration, Tekton pipeline definitions, Terraform code, Serverless configs or any other config files. Conftest uses the Rego language from Open Policy Agent fo...
CVE-2026-126436
OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered grant types because oauthclients.granttypes is never enforced. Attackers can request tokens with granttype=password to bypass the user consent screen, and disabled clients can redeem...
EUVD-2026-125007
OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered grant types because oauthclients.granttypes is never enforced. Attackers can request tokens with granttype=password to bypass the user consent screen, and disabled clients can redeem...
CVE-2026-118460
Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests...
CVE-2026-118460: CompuGroup Medical: Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary…
Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests...
PT-2026-140379
Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests...
CVE-2026-123550 OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions
OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP PAOS and HTTP-Artifact bindings when WantAssertionsSigned is false. Unauthenticated remote attackers can submit forged assertions to obtain sessions a...
CVE-2026-123550
OpenAM versions before 16.1.4 are vulnerable to an authentication bypass in the SAML v2.0 service provider. The root cause is the acceptance of unsigned assertions on ECP (PAOS) and HTTP-Artifact bindings when the WantAssertionsSigned parameter is set to false. This allows unauthenticated remote ...
CVE-2026-123550 OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions
OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP PAOS and HTTP-Artifact bindings when WantAssertionsSigned is false. Unauthenticated remote attackers can submit forged assertions to obtain sessions a...
CVE-2026-123550 OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions
OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP PAOS and HTTP-Artifact bindings when WantAssertionsSigned is false. Unauthenticated remote attackers can submit forged assertions to obtain sessions a...
CVE-2026-93998
A vulnerability exists in the SAML adapter component of Keycloak-core . The flaw stems from a failure to verify that the issuer of a signed SAML assertion matches the configured identity provider. If multiple identity providers share the same trusted signing key, an attacker controlling one provi...
CVE-2026-93998 Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...
CVE-2026-93998 Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...
CVE-2026-11749
A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period...
CVE-2026-11749
A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period...
EUVD-2026-116708
A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period...
CVE-2026-11749
A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing replay of previously consumed assertion IDs within their validity period...
CVE-2026-11749
A vulnerability exists in armeria-saml prior to version 1.41.1 because bearer assertions are not enforced for one-time use. This flaw allows an attacker to replay previously consumed assertion IDs while they remain within their validity period. The impact includes unauthorized access or session r...
UBUNTU-CVE-2026-121393
FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose WinPR assertions by sending crafted RemoteFX region rectangles. Attackers can supply a rectangle with x set to 65535 alongside a SurfaceBits destinatio...
CVE-2026-121396
FreeRDP clients version 3.0.0 before 3.32.2 built with verbose WinPR assertions are vulnerable to a denial of service (DoS). The root cause is a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. An attacker controlling an RD Gateway can send a crafted RPC-over-HTTP...