#SAML
All CosmicBytez Labs articles tagged #SAML, across news, security advisories, how-to guides, and projects.
- News
Citrix Warns of New Critical NetScaler RCE Flaw in SAML Deployments
A new critical NetScaler ADC and Gateway memory-overflow flaw in SAML configurations enables RCE; Citrix urges admins to patch immediately.
- News
Citrix Discloses Third Actively Exploited NetScaler Zero-Day in Less Than a Week
Citrix's CVE-2026-88779 SAML flaw is the third actively exploited NetScaler zero-day in a week, but a faster vendor response limited the fallout.
- News
Citrix's Third NetScaler Zero-Day in Five Weeks Hits Appliances Patched Days Earlier
CVE-2026-88779 struck NetScaler appliances patched days earlier for two other zero-days; CISA's KEV listing set an October 7 deadline.
- News
Citrix Patches NetScaler SAML Zero-Day Exploited in Attacks
Citrix rushed emergency patches for CVE-2026-88779, a NetScaler SAML zero-day exploited in DoS attacks as researchers probe RCE potential.
- Security
SAML Single Sign On Plugin Flaw Enables WordPress Account Takeover
CVE-2026-82842 lets a malicious identity provider assert any login name, letting attackers authenticate as any WordPress user, including admins.
- Security
Frontegg SAML SSO Plugin Flaw Lets Anyone Log In as WordPress Admin
CVE-2026-75800 lets unauthenticated attackers forge SAML responses and log in as any WordPress user, including administrators.
- Security
PicketLink SAML Authentication Bypass — Forged Assertions Accepted Without Validation
CVE-2026-10579 (CVSS 9.8): PicketLink Federation's SAML handler accepts forged assertions, allowing unauthenticated remote attackers to authenticate as...
- Security
CVE-2026-15981: WordPress SAML SSO Authentication Bypass (CVSS 9.8)
A critical authentication bypass in the WordPress SAML Single Sign On plugin allows unauthenticated attackers to log in as any user, including...
- Security
CVE-2026-15013: WordPress SAML SSO Plugin — Algorithm Confusion Auth Bypass
The miniOrange SAML Single Sign On plugin for WordPress through version 5.4.3 allows unauthenticated attackers to log in as any user via an RSA-to-HMAC...
- Security
CVE-2026-56155: Microsoft AD FS Access Control Flaw Enables Golden SAML Attacks
Microsoft's July 2026 Patch Tuesday fixes CVE-2026-56155, an actively exploited privilege escalation flaw in Active Directory Federation Services....
- Security
CVE-2026-41005: Cloud Foundry UAA SAML Signature Bypass
A high-severity vulnerability (CVSS 9.0) in Cloud Foundry UAA allows attackers to bypass authentication by exploiting the incorrect treatment of XML...
- Security
ZITADEL Critical XSS in SAML Endpoint Enables 1-Click
A critical cross-site scripting vulnerability in ZITADEL's login V2 /saml-post endpoint allows unauthenticated attackers to execute arbitrary JavaScript...