CVE-2026-31982
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated attacker can craft a request to the SAML sign-in endpoint and poison the cached SAML redirection for other users who subsequently initiate SAML Single Sign-On, enabling phishing and credential-theft attacks, as well as disrupting SAML authentication for all affected users.
- Score
- CVSS 3.1 7.1 High
- Status
- Modified - prodsec@nozominetworks.com
- Published
- 2026-07-09
- Last modified
- 2026-08-11
- Weaknesses
- CWE-601
Affected products
- Cmc (Nozomi Networks)
- Guardian (Nozomi Networks)
- Cmc (Nozominetworks)
- Guardian (Nozominetworks)
- Ruggedcom Ape1808 (Siemens)
References
- https://security.nozominetworks.com/NN-2026:9-01
- https://cert-portal.siemens.com/productcert/html/ssa-827968.html
