Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: miniorange.com Clear all filters
TI-2026-54273 CVE-2026-77998 · GHSA-mp5v-46h8-gw29

Authorization bypass in miniorange.com SAML SSO Free for Joomla extension for Joomla

Priority MEDIUM 50

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO logi…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00595 Published 2026-08-25 No fix listed CWE-639
TI-2026-54270 CVE-2026-77995 · GHSA-9v52-pgw4-78ww

Authorization bypass in miniorange.com miniOrange OAuth Client extension for Joomla

Priority MEDIUM 49

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educa…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00406 Published 2026-08-24 No fix listed CWE-639