CVE-2026-46491

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to version 7.0.3, simplesamlphp-module-casserver builds file paths for the file-based CAS ticket store by directly concatenating the configured ticket directory with an attacker-controll...

PT-2025-48070

Name of the Vulnerable Software and Affected Versions SIGB PMB version 8.0.1.14 Description An issue in the cms rest.php component allows attackers to execute arbitrary code by unserializing an arbitrary file. The component cms rest.php is susceptible to code execution through the unserialization...