CVE-2026-75800
Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.
| Vendor | unknown |
| Product | frontegg saml sso |
| Published | Sep 12, 2026 |
| Last Updated | Sep 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown frontegg saml sso
Be the first to know when new critical vulnerabilities affecting unknown frontegg saml sso are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Frontegg SAML SSO
0 ≤ 1.0.1
References
Credits
moonge WPScan