CVE-2026-93998
waiting for further signalsZero needs more public information before it can validate it.GHSA-rxhm-ghrc-q7h4 ↗EUVD-2026-117608 ↗
description
Red Hat AMQ Broker 7 is listed as affected by an issuer-validation flaw involving SAML assertions. An attacker controlling one identity provider may be able to authenticate as another user when identity providers share a trusted signing key; the supplied evidence does not identify the affected Broker releases or configuration path.
mitigation
Avoid sharing SAML signing keys among identity providers, and restrict or disable affected SAML authentication paths where feasible. Obtain vendor guidance to identify affected AMQ Broker 7 releases and apply the corresponding update when available.
outcome
Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-11-05 17:15Zghsa: trigger signal, started the run
- 2026-11-05 17:15Zcve.org record for CVE-2026-93998
this entry in the feed
GET /api/v1/feed/CVE-2026-93998
{ "etk_id": "ETK-2026-3679", "cve_id": "CVE-2026-93998", "display_id": "CVE-2026-93998", "ghsa_id": "GHSA-rxhm-ghrc-q7h4", "euvd_id": "EUVD-2026-117608", "status": "published", "anchor_state": "anchored", "title": "SAML assertion issuer validation flaw in Red Hat AMQ Broker 7", "summary": "Red Hat AMQ Broker 7 is listed as affected by an issuer-validation flaw involving SAML assertions. An attacker controlling one identity provider may be able to authenticate as another user when identity providers share a trusted signing key; the supplied evidence does not identify the affected Broker releases or configuration path.", "mitigation": "Avoid sharing SAML signing keys among identity providers, and restrict or disable affected SAML authentication paths where feasible. Obtain vendor guidance to identify affected AMQ Broker 7 releases and apply the corresponding update when available.", "vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "affected": [ { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "keycloak-core", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "keycloak/rhbk-openshift-rhel9", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "keycloak/rhbk-rhel9-operator", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhbk/keycloak-rhel9", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhbk/keycloak-rhel9-operator", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "candlepin", "purl": null } ], "cwes": null, "cvss_score": 7.4, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 5.5579798, "t0_at": "2026-11-05T17:15:33.414000+00:00", "signals": { "trigger_signal": { "at": "2026-11-05T17:15:33.414000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-11-05T17:15:33.414000+00:00", "url": "https://github.com/advisories/GHSA-rxhm-ghrc-q7h4" } } }
published 2026-11-05 23:32Z
last change 2026-11-06 06:32Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.