What’s Vulnerable › Products

simplesamlphp-module-casserver vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your simplesamlphp-module-casserver version is affected

Latest simplesamlphp-module-casserver vulnerabilities

• CVE-2026-46491 — SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion (CVSS 8.6)
• CVE-2025-65954 — SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout (CVSS 6.1)