Search/CVE-2026-78428
● CVE

CVE-2026-78428

DiscoveredSep 17, 2026UpdatedSep 28, 2026

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

View graph Watch Export
CVSS v3.1
—
EPSS
0.27%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 19, 2026 → Sep 30, 2026
▲ 0.03pp
0.24% → 0.27% over 3 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Sep 17, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 28, 2026