CVE-2026-103314CWE-294

CVE-2026-103314

High · published October 19, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00307 · 22.3th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2026-10-19T17:16Z
References (3)
https://access.redhat.com/errata/RHSA-2026:85932 · [email protected]https://access.redhat.com/security/cve/CVE-2026-103314 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2543879 · [email protected]
EPSS history
Timeline
  • 21 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 19 OCT 12:14Z
    Stackrox: stackrox: saml response replay allows multiple central authentication tokens
    cvelistv5
  • 19 OCT 12:14Z
    Stackrox: stackrox: saml response replay allows multiple central authentication tokens
    cvelistv5