Skip to content
The Nexus
DossierENTITY

CVE-2026-61979

Coverage of CVE-2026-61979 in the Nexus archive.

Earliest in view: Aug 25 · 08:34 UTCMost recent: Aug 25 · 08:34 UTC
Co-mentioned in this coverage
Xecurify miniOrange SAML 2.0 Single Sign On plugintopic1miniOrange SAMLtopic1WordPresstopic1Patchstackorganization1bad actorstopic1
Recent coverage
  • SECURITYAug 25 · 08:34 UTCTHE HACKER NEWS
    Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

    Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin. These vulnerabilities make it possible for an attacker to sign in as any WordPress user, including administrators. Patchstack disclosed these flaws, which include CVE-2026-61979.

CVE-2026-61979 · Dossier · The Nexus