9.8
CVE-2026-58066
- EPSS 0.24%
- Veröffentlicht 30.07.2026 06:25:55
- Zuletzt bearbeitet 31.07.2026 04:17:23
- CVE-Watchlists
- Unerledigt
Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signature to samlp:Response / saml:Assertion. An attacker could submit a wrapped document carrying forged identity attributes alongside any valid signature made by the trusted IdP certificate, and log in as an arbitrary user.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerRocket.Chat
≫
Produkt
Rocket.Chat
Default Statusunaffected
Version
0
Version <
8.7.0
Status
affected
Version
0
Version <
8.6.1
Status
affected
Version
0
Version <
8.5.2
Status
affected
Version
0
Version <
8.4.5
Status
affected
Version
0
Version <
8.3.7
Status
affected
Version
0
Version <
8.2.7
Status
affected
Version
0
Version <
8.1.7
Status
affected
Version
0
Version <
8.0.8
Status
affected
Version
0
Version <
7.10.14
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.157 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| HackerOne | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
https://github.com/RocketChat/Rocket.Chat/pull/41233
https://hackerone.com/reports/3827674