Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Signature Optional - Analysis of CVE-2026-28323

bishopfox.com | vulnerability | CVE-2026-28323

Summary

CVE-2026-28323 is a CVSS 9.8 SAML auth bypass in SolarWinds Web Help Desk. A single forged POST request grants unauthenticated access to any valid account.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (bishopfox.com)
  2. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)
  3. A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console (bishopfox.com)
  4. AppFlowy Authenticated SQL Injection (projectblack.io)
  5. James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup (yeswehack.com)
  6. CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap (yeswehack.com)

back