Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. In 4.19.2 and 4.20.2, the library permits attacker-controlled XPath transforms while processing XML signatures in specially crafted SAML messages. XPath evaluation can consume uncontrolled processing resources, allowing a remote unauthenticated attacker to deny service to any entity relying on SimpleSAMLphp or directly on the SAML2 library. The mitigation limits the number of transforms, permits only transform algorithms identified by the SAML 2.0 Core specification, and specifically rejects XPath transforms. This issue is fixed in versions 4.19.3 and 4.20.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 HIGH SEVERITY: CVE-2026-49289 (CVSS 7.5) SimpleSAMLphp SAML2 library vulnerable to DoS via XPath transforms in XML signatures. Remote unauthenticated attackers can exhaust resources. Fixed in 4.19.3 & 4.20.3 - patch now! #CVE #Vulnerability #PatchNow https://t.co/V2G3UEqKnl
Post summary
CVE-2026-49289 is a high severity DoS vulnerability in SimpleSAMLphp that has been fixed in versions 4.19.3 and 4.20.3.