Known Vulnerabilities for Single Sign-on by Pivotal
Listed below are 1 of the newest known vulnerabilities associated with "Single Sign-on" by "Pivotal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100710 json | Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(), Domains::listing(), SubDomains::... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-97274 json | Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-94606 json | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik email authenticator enrol... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-90075 json | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_codel: clamp default quantum and mtu fq_c... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-84941 json | An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenti... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-82843 json | The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertio... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-82842 json | The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming singl... | Not Provided | 2026-09-20 | 2026-09-20 |
| CVE-2026-82761 json | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding ... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-82183 json | The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single s... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-81632 json | Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to... | Not Provided | 2026-09-17 | 2026-09-17 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Pivotal | Single Sign-on | 1.9.1 | |||
| Application | Pivotal | Single Sign-on | 1.9.0 | |||
| Application | Pivotal | Single Sign-on | 1.8.4 | |||
| Application | Pivotal | Single Sign-on | 1.8.3 | |||
| Application | Pivotal | Single Sign-on | 1.8.2 | |||
| Application | Pivotal | Single Sign-on | 1.8.1 | |||
| Application | Pivotal | Single Sign-on | 1.8.0 | |||
| Application | Pivotal | Single Sign-on | 1.7.5 | |||
| Application | Pivotal | Single Sign-on | 1.7.4 | |||
| Application | Pivotal | Single Sign-on | 1.7.3 | |||
| Application | Pivotal | Single Sign-on | 1.7.2 | |||
| Application | Pivotal | Single Sign-on | 1.7.1 | |||
| Application | Pivotal | Single Sign-on | 1.7.0 |