2789 matches found
CVE-2026-102899
The application monitoring platform Sentry is vulnerable to account takeover via a flaw in its SAML SSO identity-linking flow . An attacker controlling a SAML identity provider can socially engineer an authenticated user into visiting a malicious URL. If the user's browser accepts cross-site cook...
CVE-2026-102899 Sentry: Improper authentication on SAML SSO process allows user identity linking
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-102899 Sentry: Improper authentication on SAML SSO process allows user identity linking
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
PT-2026-114360
Three critical authentication bypass flaws in Bisheng open-source LLM DevOps platform allow unauthenticated attackers to gain full admin control and expose cross-user data. Technical Breakdown: - CVE-2026-96679 Legacy SSO Bypass: The POST /user/sso endpoint accepts arbitrary usernames in JSON...
Keycloak SSO Unauthorized Access
The vulnerability of the Single Sign-On SSO authentication mechanism of the Keycloak software for managing identity verification and access control is related to the fixation of the session at the final authorization points. Exploiting this vulnerability could allow a malicious actor to gain...
CVE-2026-84312
The Nginx UI web interface for the Nginx web server is vulnerable to a login CSRF attack in versions prior to 2.4.1 . The root cause is that the GetCasdoorUri function uses a constant OAuth state value (the configured Casdoor application name), and the CasdoorCallback function fails to validate t...
CVE-2026-84312 Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GetCasdoorUri uses the configured Casdoor application name as a constant OAuth state value and CasdoorCallback does not compare the submitted state with a value bound to the initiating browser session. An unauthenticated...
Authentication Bypass
code.vikunja.io/api is vulnerable to an authentication bypass. The vulnerability is due to the emailfallback option linking an SSO login to an existing local account without verifying the email claim or requiring the account password, which allows an attacker with a token containing the victim’s...
CVE-2026-62367
Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the email cla...
CVE-2026-62367
Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider "emailfallback" option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the "email"...
org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.12)
org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...
io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8) +1 more potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.8)
org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...
org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)
org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...
io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.8) +1 more potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.8)
org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.8 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...
org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.12)
org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...
org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)
org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...
CVE-2026-62367: Improper Authentication
Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the email cla...
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...
CVE-2026-94585: Authentication Bypass Using an Alternate Path or Channel
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...