Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#SAML

1 articles

Deep Dive

Keycloak SAML Auth Bypass, Fixed in 26.8.2 (CVE-2026-117691)

Keycloak's SAML redirect binding verifies a different parameter than it processes, letting an attacker log in as any federated user; fixed in 26.8.2.

Ostorlab Team
Nov 05, 2026