CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-06 19:36 UTC
Importiert: 2026-08-18 06:31 UTC
CVSS: 9.8
Quelle-ID: full_disc
uid_hash: 9a32085558e1fd3574297fc845fa69d18df6c0c5db42a1887ad40e06eaebcee2

Full Disclosure

Posted by Öner Efe Güngör on Aug 06 Hello Full Disclosure,

I'd like to share an independent lab Proof-of-Concept for CVE-2026-15013.

Authentication Bypass

SAML Signature Algorithm Confusion vulnerability. An unauthenticated

attacker can forge a valid SAMLResponse by forcing HMAC-SHA1 verification

against the IdP's public key, allowing full account takeover (including

administrators).

Root cause:...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-15013	CRITICAL	9.8	CRITICAL	9.8			2026-07-16

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss