CVE-2017-11429

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 11, 2026

Last Seen

September 11, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical XML Signature Wrapping Vulnerability in passport-saml-encrypted70.5

The passport-saml-encrypted library version 0.1.13 contains a critical XML signature wrapping vulnerability, identified as CVE-2026-89043, allowing attackers to prepend forged unsigned assertions to validly signed SAML messages. This flaw enables identity impersonation, potentially leading to accoun...