Threats Tagged 'cve-2026-93471'
View all threats tagged with 'cve-2026-93471'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-93471'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-93471 is a high-severity vulnerability in the esaml library used by handnot2. It involves improper handling of highly compressed SAMLResponse data, allowing an unauthenticated attacker to cause a denial-of-service by exhausting server memory and crashing the Erlang VM. The vulnerability arises because the esaml_binding:decode_response/2 function decompresses attacker-controlled input without limiting output size, leading to extreme data amplification. This occurs before any signature verification and affects the SAML consume and single-logout endpoints, which accept unauthenticated requests by design. Versions from 0.1.0 onward are affected. Join the discussion | CVE Database V5 | 10/22/2026, 06:59:24 UTC Added: 10/22/2026, 07:31:12 UTC |
Showing 1 to 1 of 1 result