CVE-2026-18108 | Net::SAML2 up to 0.85 _verify_encrypted_assertion data authenticity

August 3, 2026 Yanac

A vulnerability was found in Net::SAML2 up to 0.85. It has been rated as critical. This impacts the function _verify_encrypted_assertion. Performing a manipulation results in insufficient verification of data authenticity.

This vulnerability is identified as CVE-2026-18108. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More