Security Advisory

CVE-2026-15614

7.5
HIGH

Vulnerability Description

Logto silently fails to delete IdP-initiated SAML sessions, enabling session replay and reuse within the session’s validity window.
Published Date July 23, 2026
Official Source NIST NVD Advisory
Browse More Advisories