Shibboleth Plugin Authentication Bypass via Identity Header Spoofing (CVE-2026-12281) and Fix

wpscan.com 2026-07-15查看中文 →

Security AdvisoryCVE-2026-12281HighShibboleth

Affected:

Shibboleth < 2.5.4

Fixed in:

2.5.4

Referenced CVEs: CVE-2026-12281

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Gallery for Google Photos < 1.2.1 Unauthenticated Google OAuth Token Disclosure (CVE-2026-15236) 2026-08-02 RT Mega Menu < 1.5.2 Subscriber+ Stored XSS via CSS (CVE-2026-15385) 2026-08-02 WoowBot < 4.8.4 Unauthenticated Gemini API Key Abuse (CVE-2026-15241) 2026-08-02 WooCommerce sms-alert Unauthenticated Account Takeover via OTP Bypass (CVE-2026-15206) 2026-08-02 WordPress Simple Restrict < 1.2.9 REST API Broken Access Control Disclosure (CVE-2026-15939) 2026-08-02

Offline Archive

Offline screenshot & PDF are Pro-exclusive