#sso

Pega patched a SAML authentication bypass in Pega Platform, rated Critical 9.5 and High 7.0. No CVE, no known compromise. See affected versions and fixes. #Pega #SAML #AuthenticationBypass #SSO #PegaPlatform #IAM #Vulnerability #PatchNow https://securityonline.info/pega-saml-authentication-bypass/?utm_source=mastodon&utm_medium=jetpack_social

"Damit Dein Rechner startet und Du arbeiten kannst, gibst Du 1. erst da und dann 2. da Dein Passwort ein." "Dasselbe Passwort?" "Dasselbe Passwort." "Und dann kann ich loslegen?" "Nein, um ins VPN zu kommen, musst Du nochmal Dein Passwort eingeben." "Dasselbe Passwort?" "Dasselbe Passwort." #passwort #windows #vpn #security #Sicherheit #itsecurity #sso

CERT/CC discloses six Logto vulnerabilities, including CVE-2026-15611 and CVE-2026-15616, that enable SSO authentication bypass and MFA skipping. #Logto #SSO #SAML #OIDC #MFABypass #CERTCC https://securityonline.info/logto-vulnerabilities-sso-bypass/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-53513 is a Better Auth SSRF flaw (CVSS 9.6) in the SSO plugin. It exposes cloud metadata and enables account takeover. Patch to 1.6.11 now. #BetterAuth #SSRF #CVE202653513 #SSO #OIDC https://securityonline.info/better-auth-ssrf-cve-2026-53513/?utm_source=mastodon&utm_medium=jetpack_social