A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Redhat
  • Jboss Enterprise Application Platform
  • Jboss Enterprise Application Platform Els
  • Jboss Enterprise Application Platform Expansion Pack
  • Jbosseapxp

No data.

No data.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:53644 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:53806 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-15556 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2483121 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-15556 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-15556 cve-icon
History

Wed, 12 Aug 2026 15:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7 cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7
References

Tue, 11 Aug 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat jboss Enterprise Application Platform Els
CPEs cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
Vendors & Products Redhat jboss Enterprise Application Platform Els
References

Tue, 11 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 11 Aug 2026 14:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat jboss Enterprise Application Platform Expansion Pack
Vendors & Products Redhat jboss Enterprise Application Platform Expansion Pack

Tue, 11 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 11 Aug 2026 09:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.
Title Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions
First Time appeared Redhat
Redhat jboss Enterprise Application Platform
Redhat jbosseapxp
Weaknesses CWE-347
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7
cpe:/a:redhat:jboss_enterprise_application_platform:8
cpe:/a:redhat:jbosseapxp
Vendors & Products Redhat
Redhat jboss Enterprise Application Platform
Redhat jbosseapxp
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2026-08-11T08:49:44.388Z

Updated: 2026-08-12T15:15:56.715Z

Reserved: 2026-07-13T05:00:40.638Z

Link: CVE-2026-15556

cve-icon Vulnrichment

Updated: 2026-08-11T17:44:25.662Z

cve-icon NVD

Status : Received

Published: 2026-08-11T09:17:12.687

Modified: 2026-08-12T16:16:53.540

Link: CVE-2026-15556

cve-icon Redhat

Severity : Important

Publid Date: 2026-08-11T05:54:53Z

Links: CVE-2026-15556 - Bugzilla