5.3
Moyenne
CVE-2026-31982 An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of…
Description
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated attacker can craft a request to the SAML sign-in endpoint and poison the cached SAML redirection for other users who subsequently initiate SAML Single Sign-On, enabling phishing and credential-theft attacks, as well as disrupting SAML authentication for all affected users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Guardian 26.2 | premières → < 26.2.0 | 26.2.0 |
| CMC 26.2 | premières → < 26.2.0 | 26.2.0 |
| RUGGEDCOM APE1808 | Versions non publiées |
Références
- security.nozominetworks.com security.nozominetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Guardian
Les 53 CVE de Guardian →
CVE-2026-33924
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
7.5
Élevée
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
7.5
Élevée
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to…
5.1
Moyenne
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient…
5.3
Moyenne