VulnSocial

CVE-2026-75800Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-12: 2Patch / Workaround · 2026-09-12: 2Technical Details · 2026-09-12: 209-12
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets3 URLs
Full discourse2 posts
  • ADK Cyber@ADKCyber
    Patch

    CVE-2026-75800 (CVSS 9.8): Frontegg SAML SSO WordPress plugin through 1.0.1 allows unauthenticated login. Verify usage and update if deployed. https://nvd.nist.gov/vuln/detail/CVE-2026-75800 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/zn81VIVWEk

    Post summary

    The tweet announces CVE‑2026‑75800, a high‑severity flaw in the Frontegg SAML SSO WordPress plugin that permits unauthenticated logins and urges users to check deployment and install updates.

    0000037
    95 followersView on X
  • Severity Daily@severitydaily
    Disclosure

    Frontegg SAML SSO accepts unsigned SAML responses, there is no fix, and https://WordPress.org closed the plugin September 4 https://severitydaily.com/frontegg-saml-sso-cve-2026-75800-unverified-samlresponse-no-fix-plugin-closed/

    Post summary

    The article reports CVE‑2026‑75800, noting that Frontegg SAML SSO accepts unsigned SAML responses, that no fix is available, and the related WordPress plugin was closed.

    0000041
    24 followersView on X

Explore more

Back to dashboard