[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-15556":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":37,"related":38,"reserved_at":9,"published_at":39,"modified_at":40,"state":41,"summary":42,"references_raw":51,"kevs":81,"epss":82,"epss_history":85,"metrics":206,"affected":214},"CVE-2026-15556","A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[],[],[31,33,35],{"_key":32},"RHSA-2026:53644",{"_key":34},"RHSA-2026:53645",{"_key":36},"RHSA-2026:53646",[],[],"2026-08-11T08:49:44.388Z","2026-09-17T23:27:47.818Z","Awaiting Analysis",{"cisa_kev":43,"cisa_ransomware":43,"cisa_vendor":9,"epss_severity":44,"epss_score":45,"severity":46,"severity_score":47,"severity_version":48,"severity_source":49,"severity_vector":50,"severity_status":41},false,"low",0.00238,"high",8.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",[52,59,63,68,73,77],{"url":53,"sources":54,"tags":56},"https://access.redhat.com/errata/RHSA-2026:53644",[49,55],"nvd",[57,58],"Vendor Advisory","X Refsource REDHAT",{"url":60,"sources":61,"tags":62},"https://access.redhat.com/errata/RHSA-2026:53806",[49,55],[57,58],{"url":64,"sources":65,"tags":66},"https://access.redhat.com/security/cve/CVE-2026-15556",[49,55],[67,58],"VDB Entry",{"url":69,"sources":70,"tags":71},"https://bugzilla.redhat.com/show_bug.cgi?id=2483121",[49,55],[72,58],"Issue Tracking",{"url":74,"sources":75,"tags":76},"https://access.redhat.com/errata/RHSA-2026:53645",[49,55],[57,58],{"url":78,"sources":79,"tags":80},"https://access.redhat.com/errata/RHSA-2026:53646",[49,55],[57,58],[],{"date":83,"score":45,"percentile":84},"2026-09-19",0.15182,[86,90,94,98,101,104,107,110,113,116,119,122,125,128,131,134,137,140,143,146,149,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205],{"date":87,"score":88,"percentile":89},"2026-08-11",0.00184,0.08251,{"date":91,"score":92,"percentile":93},"2026-08-12",0.00211,0.11495,{"date":95,"score":96,"percentile":97},"2026-08-13",0.00218,0.12378,{"date":99,"score":96,"percentile":100},"2026-08-14",0.1238,{"date":102,"score":96,"percentile":103},"2026-08-15",0.12506,{"date":105,"score":96,"percentile":106},"2026-08-16",0.12554,{"date":108,"score":96,"percentile":109},"2026-08-17",0.1249,{"date":111,"score":96,"percentile":112},"2026-08-18",0.12487,{"date":114,"score":96,"percentile":115},"2026-08-19",0.1253,{"date":117,"score":96,"percentile":118},"2026-08-20",0.12529,{"date":120,"score":96,"percentile":121},"2026-08-21",0.1254,{"date":123,"score":96,"percentile":124},"2026-08-22",0.12538,{"date":126,"score":96,"percentile":127},"2026-08-23",0.12523,{"date":129,"score":96,"percentile":130},"2026-08-24",0.12077,{"date":132,"score":96,"percentile":133},"2026-08-25",0.12072,{"date":135,"score":96,"percentile":136},"2026-08-26",0.12107,{"date":138,"score":96,"percentile":139},"2026-08-27",0.12102,{"date":141,"score":96,"percentile":142},"2026-08-28",0.12116,{"date":144,"score":96,"percentile":145},"2026-08-29",0.12122,{"date":147,"score":96,"percentile":148},"2026-08-30",0.1214,{"date":150,"score":96,"percentile":148},"2026-08-31",{"date":152,"score":96,"percentile":153},"2026-09-01",0.1215,{"date":155,"score":96,"percentile":156},"2026-09-02",0.12155,{"date":158,"score":96,"percentile":159},"2026-09-03",0.12147,{"date":161,"score":96,"percentile":162},"2026-09-04",0.12159,{"date":164,"score":96,"percentile":165},"2026-09-05",0.12186,{"date":167,"score":96,"percentile":168},"2026-09-06",0.12205,{"date":170,"score":96,"percentile":171},"2026-09-07",0.12196,{"date":173,"score":96,"percentile":174},"2026-09-08",0.12182,{"date":176,"score":96,"percentile":177},"2026-09-09",0.12232,{"date":179,"score":96,"percentile":180},"2026-09-10",0.12231,{"date":182,"score":96,"percentile":183},"2026-09-11",0.12225,{"date":185,"score":96,"percentile":186},"2026-09-12",0.12342,{"date":188,"score":96,"percentile":189},"2026-09-13",0.12298,{"date":191,"score":96,"percentile":192},"2026-09-14",0.12314,{"date":194,"score":96,"percentile":195},"2026-09-15",0.12373,{"date":197,"score":96,"percentile":198},"2026-09-16",0.12416,{"date":200,"score":96,"percentile":201},"2026-09-17",0.12455,{"date":203,"score":45,"percentile":204},"2026-09-18",0.15215,{"date":83,"score":45,"percentile":84},[207,212],{"source":49,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":208,"cvss_v4_0":9},{"baseScore":47,"baseSeverity":209,"vectorString":50,"impactScore":210,"exploitabilityScore":211},"HIGH",8.7,7.2,{"source":55,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":213,"cvss_v4_0":9},{"baseScore":47,"baseSeverity":209,"vectorString":50,"impactScore":210,"exploitabilityScore":211},[]]