CVE-2026-25748

概要

参考情報

• goauthentik/authentik release version/2025.10.4 · Product
• goauthentik/authentik release version/2025.12.4 · Product
• goauthentik/authentik security advisory · Vendor Advisory

authentik のその他の脆弱性

• CVE-2026-49448緊急 9.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by send…
• CVE-2026-49443高 8.8authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a…
• CVE-2026-47201高 8.5authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is …
• CVE-2026-42849緊急 9.3authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Sim…
• CVE-2026-41569中 6.1authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply para…