CVE-2026-15556
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
In Picketlink's SP signature validation, a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and authenticate as any principal with any roles on the protected application.
Risk Assessment
Risk of unauthorized access to the application with any user's privileges, potentially leading to data confidentiality and integrity breaches.
Recommendation
Apply vendor patches to fix signature validation and ensure SAML responses contain at least one valid assertion.
Original NVD description (English source)
A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.