CVE-2026-18108

The Net::SAML2 Perl module (versions before 0.86 ) is vulnerable to an authentication bypass due to improper verification of cryptographic signatures. The root cause lies in the _verify_encrypted_assertion function, which returns a decrypted assertion as verified if it lacks a dsig:Signature elem...