CVE-2026-24069 — Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST

CVE-2026-24069

Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST PUBLISHED

Description (CNA)

Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-premise (KOP) was affected before 2.8.2509.4.

Affected (CNA)

Vendor / product	Versions
Kiuwan / SAST	affected <2.8.2509.4

CWE

CWE-863

References

https://r.sec-consult.com/kiuwanlock

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2026/Apr/5