SAML Archives • Daily CyberSecurity

Citrix Warns of Critical NetScaler SAML Flaw CVE-2026-107406 That Can Lead to Remote Code Execution Citrix NetScaler vulnerability CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway can lead to remote code execution

Citrix NetScaler vulnerability CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway can lead to remote code execution

Citrix Warns of Critical NetScaler SAML Flaw CVE-2026-107406 That Can Lead to Remote Code Execution

Do Son October 9, 2026

TL;DR Citrix has published a critical bulletin for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and...

Citrix NetScaler CVE-2026-88779 exploited in the wild against NetScaler SAML authentication deployments

Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline

Do Son October 4, 2026

TL;DR Citrix has assigned Citrix NetScaler CVE-2026-88779 to the SAML issue behind recent appliance reboots. The company...

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue NetScaler SAML authentication issue causing patched NetScaler appliances to reboot after CVE-2026-88771 and CVE-2026-88772 exploitation

NetScaler SAML authentication issue causing patched NetScaler appliances to reboot after CVE-2026-88771 and CVE-2026-88772 exploitation

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

Do Son October 2, 2026

TL;DR Citrix admins report NetScaler appliances rebooting repeatedly even after updating to build 14.1-73.37. Citrix now says...

Citrix NetScaler pre-auth RCE CVE-2026-8452 SAML heap overflow exploit

Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

Do Son August 17, 2026

Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug,...

CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA Handling Logto vulnerabilities enabling SSO authentication bypass across OIDC, OAuth 2.1, and SAML sign-in flows

Logto vulnerabilities enabling SSO authentication bypass across OIDC, OAuth 2.1, and SAML sign-in flows

CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA Handling

Do Son July 24, 2026

TL;DR CERT/CC published vulnerability note VU#492466 on 23 July 2026, covering six flaws in the Logto identity...

Poweradmin host header injection flaw CVE-2026-54588 enabling DNS admin account takeover

Poweradmin Host Header Injection Lets Attackers Hijack DNS Accounts

Do Son July 2, 2026

TL;DR A critical flaw in Poweradmin lets attackers take over DNS administrator accounts. Tracked as CVE-2026-54588, it...

Cloud Foundry UAA vulnerability SAML authentication bypass, CVE-2026-41005 Cloud Foundry key disclosure Elliptic Curve private keys

Cloud Foundry UAA Vulnerability Enables SAML Authentication Bypass

Do Son June 17, 2026

A critical Cloud Foundry UAA vulnerability has emerged, and it lets attackers slip past SAML logins entirely....

Critical 9.8 Webex Flaw Lets Attackers Impersonate Any User Cisco Webex SSO Webex Impersonation Flaw

Critical 9.8 Webex Flaw Lets Attackers Impersonate Any User

Do Son April 16, 2026

In the modern enterprise, the Single Sign-On (SSO) portal is the master key to a company’s digital...

CISA Issues Emergency Mandate as Critical 9.3 NetScaler Flaw “Bleeds” Admin Sessions Citrix NetScaler Vulnerability CVE-2026-3055

CISA Issues Emergency Mandate as Critical 9.3 NetScaler Flaw “Bleeds” Admin Sessions

Do Son March 31, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical vulnerability impacting Citrix NetScaler ADC...

Critical FortiGate SSO Flaw Under Active Exploitation: Attackers Bypass Auth and Exfiltrate Configs Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability

Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability

Critical FortiGate SSO Flaw Under Active Exploitation: Attackers Bypass Auth and Exfiltrate Configs

Do Son December 16, 2025

A critical security crisis is unfolding for Fortinet administrators this week. Just days after the vendor disclosed...

Jenkins Faces Wave of Plugin Flaws, Including SAML Authentication Bypass (CVE-2025-64131) Jenkins security advisory 2026, CVE-2026-53435, CVE-2026-53436 Jenkins Plugin RCE CI/CD Security Advisory Jenkins Vulnerability CVE-2026-33001 Jenkins CLI DoS, Coverage Plugin XSS Jenkins SAML Hijacking, Plaintext Secrets CVE-2023-43495 - Jenkins Vulnerability

Jenkins security advisory 2026, CVE-2026-53435, CVE-2026-53436 Jenkins Plugin RCE CI/CD Security Advisory Jenkins Vulnerability CVE-2026-33001 Jenkins CLI DoS, Coverage Plugin XSS Jenkins SAML Hijacking, Plaintext Secrets CVE-2023-43495 - Jenkins Vulnerability

Jenkins Faces Wave of Plugin Flaws, Including SAML Authentication Bypass (CVE-2025-64131)

Do Son October 30, 2025

The Jenkins project has issued a major security advisory addressing a wave of vulnerabilities, including high-severity flaws...

Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass Node-SAML Vulnerability, SAML Authentication Bypass

Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass

Do Son July 28, 2025

A critical vulnerability has been discovered in the popular open-source Node.js library Node-SAML, used to implement SAML...

Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library samlify vulnerability SAML Signature Wrapping

Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library

Do Son May 20, 2025

A newly disclosed vulnerability, CVE-2025-47949 (CVSSv4 9.9), has put countless Single Sign-On (SSO) implementations at risk by...