CVE-2026-63182 | LightSAML up to 4.7.0/5.0.0 Signature Validation validateReference improper authentication

October 30, 2026 Yanac

A vulnerability was found in LightSAML up to 4.7.0/5.0.0 and classified as critical. This affects the function XMLSecurityDSig::validateReference of the component Signature Validation. The manipulation results in improper authentication.

This vulnerability is identified as CVE-2026-63182. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More