CVE-2026-75800 — Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse

CVE-2026-75800

Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse PUBLISHED

Description (CNA)

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.

Affected (CNA)

Vendor / product	Versions
Unknown / Frontegg SAML SSO	affected 0 through 1.0.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/be658aa5-8f7f-4938-bf13-b2e6ed3dcf89/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.