Threats tagged 'ghsa-794g-x443-36f7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.4%	CVE-2026-2092Keycloak · Unauthorized access via improper validation of encrypted SAML assertions High7.7EPSS 0.4%2026-07-02GCVE DatabaseCVE-2026-2092 Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response, injecting an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure. EPSS 0.4%Report on CVE-2026-2092 Vulnerability CWE-1287 #ghsa-794g-x443-36f7 #maven	GCVE Database	2026-07-02

Page 1 of 1 · 1 duplicate CVE record merged