What’s Vulnerable › Products

TIMLEGGE Net::Saml2 vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your TIMLEGGE Net::Saml2 version is affected

Latest TIMLEGGE Net::Saml2 vulnerabilities

• CVE-2026-18108 — Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature (CVSS 9.8)
• CVE-2026-18092 — Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtree (CVSS 8.1)
• CVE-2026-18089 — Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured (CVSS 7.5)