CVE-2026-53425

creationtimestamp| type| source ---|---|--- 2026-08-20 19:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjx4abnet2u...

CVE-2026-53425 Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses

Insufficient Verification of Data Authenticity vulnerability in dropbox samly allows an attacker to establish an authenticated session using a SAML response the service provider never requested. Samly.SPHandler.validateauthresp/3 in lib/samly/sphandler.ex validates a SAML response for the...