CVE-2026-24069CWE-863

Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST

Medium · published April 14, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-premise (KOP) was affected before 2.8.2509.4.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-04-14T11:26Z
EPSS history
Timeline
  • 14 APR 11:26Z
    Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST
    cvelistv5