CVE-2026-77998

Name of the Vulnerable Software and Affected Versions miniOrange SAML SSO versions prior to 11.0.2 SAML SP Single Sign On – Login with ADFS versions prior to 6.4 SAML SP Single Sign On – SAML SSO login with Google Apps versions prior to 6.4

Description An authentication bypass exists due to the mo saml validate signature() function performing a loose boolean check on the integer returned by PHP's openssl verify(). Because an error return value of -1 is evaluated as truthy, it is treated as a successful signature verification. Unauthenticated attackers can log in as any existing user, including administrators, by submitting a crafted SAMLResponse containing an attacker-controlled NameID and a malformed signature value that triggers an OpenSSL processing error, leading to the execution of wp set auth cookie() for the targeted account.

Recommendations Update miniOrange SAML SSO to version 11.0.2. Update SAML SP Single Sign On – Login with ADFS to version 6.4. Update SAML SP Single Sign On – SAML SSO login with Google Apps to version 6.4.