Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jboss-eap

CVE-2026-15556 is a high-severity vulnerability in Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7. It involves improper verification of cryptographic signatures in Picketlink's SAML response validation, allowing an attacker to forge a SAML response and authenticate as any principal with any roles on the protected application. A security update is available in version 7.4.25 that addresses this issue.

This vulnerability arises from a flaw in Picketlink's SP signature validation within Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7. Specifically, a SAML response containing zero assertion elements matching the signature check can be exploited by an attacker to forge a SAML response, thereby authenticating as any principal with any roles on the protected application. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and high confidentiality and integrity impact. Red Hat has released version 7.4.25 as a security update to fix this issue.

Detailed information about A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature c

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow… (CVE-2026-15556) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-15556: Improper Verification of Cryptographic Signature in Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.

This vulnerability arises from a flaw in Picketlink's service provider (SP) signature validation for SAML responses. Specifically, if a SAML response contains zero assertion elements matching the signature check, an attacker can exploit this to forge a SAML response and authenticate as any user with arbitrary roles on the protected application. The vulnerability affects Red Hat JBoss Enterprise Application Platform 7 due to inclusion of the vulnerable picketlink-federation and picketlink-common components. Red Hat JBoss EAP 8.x is not affected as it lacks these components. The CVSS v3.1 base score is 8.1 (high severity) with network attack vector, low complexity, low privileges required, no user interaction, and high confidentiality and integrity impact. No vendor advisory indicates an official fix or patch availability at this time.

Detailed information about CVE-2026-15556: Improper Verification of Cryptographic Signature in Red Hat Red Hat JBoss Enterprise Application Platform 7 affecting

CVE-2026-15556: Improper Verification of Cryptographic Signature in Red Hat Red Hat JBoss Enterprise Application Platform 7 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-15556: Improper Verification of Cryptographic Signature in Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25


CVE-2026-15556: Improper Verification of Cryptographic Signature in Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7CVE-2026-15556 0 CVE-2026-15556 is a high-severity vulnerability in Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7. It involves improper verification of cryptographic signatures in Picketlink's SAML response validation, allowing an attacker to forge a SAML response and authenticate as any principal with any roles on the protected application. A security update is available in version 7.4.25 that addresses this issue. HighVulnerability#gcve #osv #ghsa-vw9v-mpfh-qwg3 Join the discussion	GCVE Database	08/11/2026, 08:49:44 UTC Added: 08/12/2026, 16:12:34 UTC
CVE-2026-15556: Improper Verification of Cryptographic Signature in Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25CVE-2026-15556 0 A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application. HighVulnerability#cve #cve-2026-15556 Join the discussion	CVE Database V5	08/11/2026, 08:49:44 UTC Added: 08/11/2026, 09:11:59 UTC

Threats Tagged 'cve-2026-15556'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-15556'

Lead Pen Test Professional