https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:58:39.771445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-31284 cnvd-2017-31284 2026-10-10T14:58:39.775208+00:00 cnvd-2017-31284 https://cve.radiocsirt.org/vuln/euvd-2026-77374 EUVD-2026-77374 2026-10-10T14:58:39.775253+00:00 EUVD-2026-77374 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12868 fkie_cve-2017-12868 2026-10-10T14:58:39.775268+00:00

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.

 https://cve.radiocsirt.org/vuln/ghsa-j96g-47x2-46hv GHSA-j96g-47x2-46hv — SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module 2026-10-10T14:58:39.775297+00:00

Affected: Packagist: simplesamlphp/simplesamlphp

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.

 https://cve.radiocsirt.org/vuln/gsd-2017-12868 gsd-2017-12868 2026-10-10T14:58:39.775321+00:00 gsd-2017-12868 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12868 UBUNTU-CVE-2017-12868 2026-10-10T14:58:39.775333+00:00

Affected: Ubuntu:Pro:16.04:LTS: simplesamlphp

The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attacks or possibly bypass authentication by leveraging missing character conversions before an XOR operation.