CVE-2026-9096 | Casdoor up to 2.362.0 ParseSamlResponse assertionInfo.WarningInfo user session

May 28, 2026 Yanac

A vulnerability marked as critical has been reported in Casdoor up to 2.362.0. This affects the function ParseSamlResponse. The manipulation of the argument assertionInfo.WarningInfo leads to manage user sessions.

This vulnerability is uniquely identified as CVE-2026-9096. The attack can only be initiated within the local network. No exploit exists.VulDB Recent EntriesRead More