BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0

An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated attacker can craft a request to the SAML sign-in endpoint and poison the cached SAML redirection for other users who subsequently initiate SAML Single Sign-On, enabling phishing and credential-theft attacks, as well as disrupting SAML authentication for all affected users.

5.3 MEDIUMEPSS 0.30%Not in KEVNVD: Modified

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
5.3MEDIUM4.0Nozomi (CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:L/SI:L/SA:L
7.1HIGH3.1Nozomi (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Details

CVE ID
CVE-2026-31982
Status
Modified
Assigner (CNA)
Nozomi
Published
Jul 9, 2026
Last modified
2026-08-11 13:18 UTC
Weaknesses
  • CWE-601 · URL redirection to untrusted site ('open redirect')

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-09 08:14 UTC.