CVE-2026-15615 UNKNOWN

CVE-2026-15615

Published: 2026-07-23

Description

Logto omits validation of the SAML <Conditions> element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…