CVE-2026-88920

UNKNOWN 0.0

Apache WSS4J: SAML Sender-Vouches Authentication Bypass

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a crafted unsigned SAML sender-vouches assertion containing an attacker-controlled key. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.

Vendor	apache software foundation
Product	apache wss4j
Published	Sep 30, 2026
Last Updated	Sep 30, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache wss4j

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache wss4j are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache WSS4J

4.0.0 < 4.0.2 3.0.0 < 3.0.6 0 < 2.4.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/grt43m3bgbzz0mk0cnho3rcybb1j01z9 openwall.com: http://www.openwall.com/lists/oss-security/2026/09/30/10

Credits

Reported by n0mi1k