Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#session hijacking

1 articles

Deep Dive

OpenAM Session Token Theft and SAML Bypass (CVE-2026-123551)

OpenAM before 16.1.4 leaks live session tokens and accepts unsigned SAML assertions, letting unauthenticated attackers hijack sessions; fixed in 16.1.4.

Ostorlab Team
Nov 08, 2026