https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T10:51:46.439251+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116201 fkie_cve-2026-116201 2026-10-26T10:51:46.440594+00:00

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple authenticated victim sessions that evade IdP-driven revocation.

 https://db.gcve.eu/vuln/ghsa-xj2c-rw8f-hjqh GHSA-xj2c-rw8f-hjqh 2026-10-26T10:51:46.440669+00:00

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one captured assertion to obtain multiple authenticated victim sessions that evade IdP-driven revocation.