SAP patches four CVSS 10.0 flaws, including unauthenticated RCE
The November fixes cover NetWeaver ICM, Web Dispatcher, Gateway, and SAML, and none require user interaction.
Stories per day · 30 days
5 RSS
Relatedsonicwall7ssl-vpn6authentication-bypass5mfa4active-directory3active-roles3kev3one-identity3sonicos3cisa-kev2identity-management2mendix2netweaver2remote-code-execution2sap2siemens2web-dispatcher2amazon-provider1
55 stories, newest first · one card per story
Stories tagged #saml
One Identity ships Active Roles 8.6 with RSTS security fix
The July 27 release supersedes 8.3 through 8.5 and adds a REST API plus SAML 2.0 token support.
SAP November patch day fixes four CVSS 10.0 flaws
Unauthenticated memory corruption in ICM and Web Dispatcher may allow code execution; exploitation is not discussed.
FortiAuthenticator LDAP injection can bypass authentication
Exploitation needs a malicious or compromised upstream IdP, or user control of the NameID or username attribute.
SonicWall patches seven SonicOS firewall flaws; CISA lists SAML bypass
Five of the Gen 7 and Gen 8 bugs allow unauthenticated remote attacks; only CVE-2026-19868 has a workaround.
SonicWall SSL-VPN MFA bypass flaw exploited in attacks
CISA added CVE-2026-19868 to KEV after exploitation; affects SonicOS SSL-VPN with SAML MFA
1
SonicWall SSL-VPN flaw CVE-2026-19868 can bypass SAML MFA
SonicWall calls exploitation only potential; Gen7 through 7.3.3-7015 and Gen8 through 8.2.2-8015 need firmware, with no workaround.
Siemens Mendix SAML module allows assertion-replay login bypass
Unauthenticated attackers can replay a valid IdP-initiated SAML response; fixes are V4.2.4 and V3.6.29.
Siemens Mendix SAML module has an authentication-bypass flaw
Mendix 9 builds before V3.6.29 and Mendix 10 and 11 builds before V4.2.4 are affected; Canada urges administrators to apply updates.
GitLab fixes unauthenticated RCE in CE and EE (CVE-2026-110264)
The integer-overflow bug scores CVSS 10.0, is fixed in seven releases, and has no confirmed attacks or public exploit.
3
ICANN tests law-enforcement login for urgent non-public WHOIS requests
SAML access to the Registration Data Request Service is in test with the FBI and Interpol; registrars get 24 hours, or 72 for complex cases.
Airflow Amazon provider before 9.38.0 has SAML login CSRF (CVE-2026-86467)
The AWS auth manager accepts a SAML assertion without matching it to the browser that started login.
NetScaler intrusions chain CVE-2026-88771 and CVE-2026-88779
On an affected 14.1 appliance, attackers gained root, planted PHP web shells, and took configuration and key material.
Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway
Citrix patched critical NetScaler flaw CVE-2026-107406, a CVSS 9.5 memory overflow that can enable denial of service or code execution.
Citrix gives NetScaler admins another critical reason to patch
Citrix warns NetScaler ADC and Gateway CVE-2026-107406 can enable remote code execution, scoring CVSS 9.5.
CVE-2026-97791: Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests
Apache CXF STSTokenValidator can accept untrusted SAML assertions by sharing validation state across requests.
CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
Citrix patched critical NetScaler flaw CVE-2026-107406, which can allow remote code execution or denial of service.
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges immediate patches for critical NetScaler RCE CVE-2026-107406, with no known exploitation yet.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Citrix urges immediate patching of critical NetScaler ADC/Gateway memory-overflow flaw CVE-2026-107406 (CVSS 9.5) enabling RCE; no known exploits yet.
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5
Citrix disclosed CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can allow remote code execution.
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix urges NetScaler ADC and Gateway customers to patch CVE-2026-107406, a critical SAML memory overflow enabling remote code execution.
Citrix discloses third actively exploited NetScaler zero-day in less than a week
Citrix patched CVE-2026-88779, a third exploited NetScaler zero-day causing denial of service on SAML appliances.
Citrix NetScaler security snafus get even worse amid more 0-day reports
Attackers are exploiting unpatched Citrix NetScaler CVE-2026-88779, a SAML memory overflow that causes denial of service.
CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
CISA added actively exploited Citrix NetScaler CVE-2026-88779 to KEV after attacks crash ADC and Gateway appliances.