Paper/Archive/CVE-2026-10579

CVE-2026-10579

Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 — Picketlink-federation: auth bypass in picketlink saml unsolicited-response

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 39.5.395 × 207.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted operations, or other flaws.

Affected

ProductAffectedFixed inSource

Red Hat JBoss Enterprise Application Platform 7.4.25see advisory–CNA

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:2.16.0-22.redhat_00057.1.el7eapCNA

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:2.3.14-11.SP11_redhat_00001.1.el7eapCNA

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:1.5.26-2.Final_redhat_00001.1.el7eapCNA

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:2.18.8-1.redhat_00003.1.el7eapCNA

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:5.0.31-3.SP2_redhat_00001.1.el7eapCNA

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:1.10.0-46.Final_redhat_00044.1.el7eapCNA

Scores by source

redhat (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryaccess.redhat.com/errata/RHSA-2026:53644 advisoryaccess.redhat.com/errata/RHSA-2026:53645 advisoryaccess.redhat.com/errata/RHSA-2026:53646 advisoryaccess.redhat.com/errata/RHSA-2026:53806 refaccess.redhat.com/security/cve/CVE-2026-10579 refbugzilla.redhat.com/show_bug.cgi?id=2480325