HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-15556 — A flaw was found in Picketlink's SP signature validation; a SAML response contai...

·Source: NIST NVD

Updated:

Executive Summary

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.

Analysis

A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application. CVSS Score: 8.1. Published: 2026-08-11T09:17:12.687.

Indicators of Compromise (1)

CVE (1)
CVE-2026-15556
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

TMX complete acquisition of Rafi Indices

TMX Group Limited (TMX Group) today announced it has completed the acquisition of RAFI Indices, LLC (RAFI Indices) from Research Affiliates Global Holdings, LLC (Research Affiliates), a global index provider and investment advisor. The transaction was announced in June 2026.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-75784 — A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this ...

A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.

CVE-2026-75784
NIST NVD
CRITICALVulnerability

Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities

Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds

Infosecurity Magazine