miniOrange SAML SSO Authentication Bypass via Signature Confusion and OpenSSL Error (CVE-2026-61979/15981)
Security Advisory
CVE-2026-61979, CVE-2026-15981
High
miniOrange
Affected:
- miniOrange SAML SSO Free (single site) 3.0.0 - 5.4.7
- miniOrange SAML SSO Premium (single site) 11.3.0 - 13.1.0
- miniOrange SAML SSO Standard (single site) 15.1.0 - 17.1.0
- miniOrange SAML SSO Premium/Enterprise/All-Inclusive (multisite) 20.0.0 - 20.2.8
- miniOrange SAML SSO Enterprise/All-Inclusive (single site) 25.0.0 - 26.1.0
Fixed in:
- 5.4.5
- 13.0.4
- 17.0.6
- 20.2.8
- 26.0.3
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from patchstack.com, cleaned by our LLM pipeline, and translated to English. View original.