What’s Vulnerable › Products

simplesamlphp saml2 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your simplesamlphp saml2 version is affected

Latest simplesamlphp saml2 vulnerabilities

• CVE-2026-49289 — SimpleSAMLphp SAML2: Possible DoS via XPath Transform (CVSS 7.5)
• CVE-2026-49283 — SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass (CVSS 8.7)
• CVE-2025-27773 — SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding (CVSS 8.6)
• CVE-2024-52806 — SimpleSAMLphp SAML2 has an XXE in parsing SAML messages (CVSS 8.3)
• CVE-2023-49087 — Validation of SignedInfo (CVSS 7.5)
• CVE-2018-7711 — (CVSS 8.1)
• CVE-2018-6519 — (CVSS 7.5)
• CVE-2016-9814 — (CVSS 9.1)