Simplesamlphp

    Dashboard / Vendors

    Products: 11
    Vulnerabilities: 38
    Known Exploited: 0
    4
    Critical Level Threats
    15
    High Level Threats
    14
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-49289

    SimpleSAMLphp SAML2: Possible DoS via XPath Transform

    Last Modified: Aug 19, 2026
    Published: Aug 19, 2026

    CVE-2026-49283

    SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass

    Last Modified: Aug 19, 2026
    Published: Aug 19, 2026

    CVE-2026-49284

    SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`

    Last Modified: Jul 20, 2026
    Published: Jul 17, 2026

    CVE-2026-46491

    SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion

    Last Modified: Jun 10, 2026
    Published: Jun 09, 2026

    CVE-2025-65954

    SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout

    Last Modified: May 27, 2026
    Published: May 18, 2026
    Items Per Page