Skip to content
Threat Feed
Subscribe

Product

SimpleSAMLphp SAML2-Legacy (<4.20.2)

1 brief RSS
high advisory

SimpleSAMLphp HTTP-Artifact Authentication Bypass via TLS Validator Confusion (CVE-2026-49283)

A critical vulnerability (CVE-2026-49283) in SimpleSAMLphp's HTTP-Artifact receive path allows a malicious or lower-trust Identity Provider (IdP) to bypass authentication and impersonate users from a higher-trust IdP by leveraging a flaw where `SOAPClient::validateSSL()` fails to properly validate TLS public keys for unsigned SAML Responses.

SimpleSAMLphp SAML2 +3 vulnerability saml authentication-bypass identity-federation
1t