CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Citrix NetScaler ADC & Gateway SAML IDP Memory Overread Vulnerability (CVE-2026-3055) Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured to act as a SAML Identity Provider (IDP)
[Impact] Unauthenticated remote attackers can trigger an out-of-bounds memory read, potentially exposing highly sensitive session tokens, credentials, or SSL private keys, and facilitating remote code execution
[Mitigation] Immediately apply the official security updates provided by Citrix, or temporarily disable the SAML IDP configuration if patching cannot be performed immediately
Fortinet FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass via Improper Verification of SAML Cryptographic Signature (CVE-2025-59718)
[Affected Scope] FortiOS 7.0.0-7.0.17 / 7.2.0-7.2.11 / 7.4.0-7.4.8 / 7.6.0-7.6.3, FortiProxy 7.0.0-7.0.21 / 7.2.0-7.2.14 / 7.4.0-7.4.10 / 7.6.0-7.6.3, FortiSwitchManager 7.0.0-7.0.5 / 7.2.0-7.2.6.
[Impact] An unauthenticated remote attacker can bypass FortiCloud SSO authentication via a crafted SAML response message, gaining full administrative access to the affected device.
[Mitigation] Immediately upgrade to the patched firmware versions, or disable FortiCloud SSO login and restrict administrative access to trusted IP addresses as a temporary workaround.
Zoho ManageEngine Multiple On-Premise Products SAML XML Signature Verification Remote Code Execution (RCE) Advisory (CVE-2022-47966)
[Affected Scope] Zoho ManageEngine on-premise products with SAML SSO configured or previously enabled (e.g., ServiceDesk Plus through 14003, ADSelfService Plus through 6210, Endpoint Central through 10.1.2228.10)
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending a specially crafted SAML response containing malicious XSLT payloads
[Mitigation] Immediately upgrade the affected ManageEngine products to the latest patched versions, or temporarily disable SAML SSO and restrict access to SAML endpoints
Zabbix Frontend SAML SSO Session Bypass and Privilege Escalation Vulnerability (CVE-2022-23131)
[Affected Scope] Zabbix Frontend versions 4.0.36, 5.0.18, 5.4.8, 6.0.0-alpha7 and below with SAML SSO enabled
[Impact] Unauthenticated remote attackers can modify session data to bypass authentication, escalating privileges to gain full administrative access
[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (4.0.37, 5.0.19, 5.4.9, 6.0.0-beta1 or later) or disable SAML authentication
Palo Alto Networks PAN-OS SAML Signature Verification Bypass Vulnerability (CVE-2020-2021)
[Affected Scope] PAN-OS 8.1, 9.0, and 9.1 versions, Panorama, and GlobalProtect gateways with SAML authentication enabled and 'Validate Identity Provider Certificate' disabled
[Impact] Unauthenticated remote attackers can bypass SAML signature verification to gain administrative access to PAN-OS/Panorama web interfaces or access protected network resources
[Mitigation] Upgrade PAN-OS to patched versions (9.1.3, 9.0.9, 8.1.15 or later) or enable the 'Validate Identity Provider Certificate' option in the SAML Identity Provider Server Profile
IBM Data Risk Manager SAML Authentication Bypass and Remote Admin Access Vulnerability (CVE-2020-4427)
[Affected Scope] IBM Data Risk Manager versions 2.0.1 through 2.0.6 configured with SAML authentication.
[Impact] A remote attacker can bypass the authentication process and gain full administrative access to the system by sending a specially crafted HTTP request.
[Mitigation] Apply the official security patches provided by IBM, or restrict access to SAML endpoints and review authentication configurations.