What’s Vulnerable › Products

Shibboleth vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Shibboleth version is affected

Latest Shibboleth vulnerabilities

• CVE-2026-12281 — Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing (CVSS 8.1)