CVE-2022-25262

CVE-2022-25262 PoC + detalles de la vulnerabilidad CVE-2022-25262 | JetBrains Hub: toma de control de la respuesta SAML con un solo clic CVE-2022-25262 Requisitos Uso ¿Cómo funciona? Pool de códigos de autorización para el intercambio «OAuth2 - SAML» Apropiación del código de autorización OAuth2 ...

CVE-2022-47966

CVE-2022-47966 POC para CVE-2022-47966 que afecta los siguientes productos de ManageEngine: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Bypass de Autenticación PoC Prueba de concepto para CVE-2026-15013 : bypass de autenticación no autenticado mediante confusión de algoritmo de firma SAML HMAC-SHA1 en el plugin de WordPress SAML Single Sign On – SSO Login de miniOrange versiones hasta ...

CVE-2026-15640 Authentication Bypass via SAML Response Manipulation

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...

CVE-2026-75800 Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts...

CVE-2026-75800

The Frontegg SAML SSO WordPress plugin through 1.0.1 fails to verify the signature or issuer of SAML authentication responses before establishing a session. This allows unauthenticated attackers to log in as any user (including administrators) and create arbitrary accounts, resulting in full site...

CVE-2026-73784 HPE IceWall products, Remote Bypass of Security Restrictions

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

EUVD-2026-75975

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

CVE-2026-73784 HPE IceWall products, Remote Bypass of Security Restrictions

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

CVE-2026-73784

A SAML response tampering vulnerability in HPE IceWall products (MFA 4.0 Enterprise/Standard Edition SAML Authentication Option, Federation Agent 4.0, and Federation Proxy 4.0) allows a remote attacker with low privileges to impersonate another user by bypassing security restrictions. HPE rates t...

PT-2026-89778

🚨 HIGH SEVERITY: CVE-2026-73784 CVSS 8.8 HPE IceWall SAML response tampering vulnerability allows attackers to impersonate users. Network-exploitable with low complexity. Affected: HPE IceWall products Impact: Full compromise C/I/A: High CVE PatchNow https://t.co/BIQ1Jg5WsS...

EUVD-2026-70411

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

Astra Linux – Vulnerability in Lasso

There is a denial-of-service vulnerability in the lassoproviderverifysamlsignature functionality of Entr’ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial-of-service attack. An attacker can send a malformed SAML response to exploit this vulnerability...

DEBIAN-CVE-2026-49283

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-49283

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-19842

The WordPress SAML Single Sign On plugin (versions 4.8.85–5.4.6) fails to verify SAML response signatures before storing certificates, then exposes a one-click admin control that promotes any stored certificate to the trusted signing anchor. An unauthenticated attacker can submit a self-signed ce...

CVE-2026-15981 SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mosamlvalidatesignature function performing a loose boolean check on the raw tri-state integer returned by PHP's opensslverify, causing a...

PT-2026-64168

Name of the Vulnerable Software and Affected Versions SAML Single Sign On – SSO Login versions prior to 5.4.5 Description An authentication bypass exists due to the mo saml validate signature function performing a loose boolean check on the integer returned by PHP's openssl verify. An error retur...

SUSE-SU-2026:3123-1 Security update for shibboleth-sp

This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...

SUSE-SU-2026:3098-1 Security update for shibboleth-sp

This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...