LLogto

Products

Exploited and recent CVEs

• CVE-2026-15611 Critical 9.1 Unverified email-based SSO account linking 0.5%
• CVE-2026-15612 Critical 9.1 LOIDC nonce validation bypass 0.2%
• CVE-2026-15614 High 7.5 IdP-initiated SAML sessions not reliably invalidated (replay) 0.3%
• CVE-2026-15615 High 7.5 SAML <Conditions> element not validated 0.2%
• CVE-2026-15616 Critical 9.1 Local MFA not enforced during SSO sign-in 0.5%
• CVE-2026-15617 Critical 9.1 Principal/domain lookup without case normalization 0.4%