Read the docs

miniorange.com

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

miniorange.com records in CISA KEV

No miniorange.com vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-54273 CVE-2026-77998 · GHSA-mp5v-46h8-gw29

Authorization bypass in miniorange.com SAML SSO Free for Joomla extension for Joomla

Priority MEDIUM 50

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO logi…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00595 Published 2026-08-25 No fix listed CWE-639
TI-2026-54270 CVE-2026-77995 · GHSA-9v52-pgw4-78ww

Authorization bypass in miniorange.com miniOrange OAuth Client extension for Joomla

Priority MEDIUM 49

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educa…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00406 Published 2026-08-24 No fix listed CWE-639
Open these records in search →