CVE-2026-10579 in PicketLink

الملخص

بحسب MITRE • 11/08/2026

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted operations, or other flaws.

Once again VulDB remains the best source for vulnerability data.

• إفشاء: 11/08/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-388010
• CPE: جاهز
• CWE: CWE-639 (مؤكد)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00394
• KEV: لا
• النشاطات: منخفض

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-10579
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10579
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-10579/