{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-14917",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-14917",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-09-16T10:06:07.410Z",
    "updatedAt": "2026-09-16T13:26:06.116Z",
    "importedAt": "2026-10-24T01:57:55.771Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Kong API Gateway Enterprise: SAML Authentication bypass",
      "summary": "A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without verifying a valid cryptographic signature.\n\n\n\nAs a result, an unauthenticated remote attacker may be able to submit a crafted SAML response and impersonate arbitrary users, including administrators",
      "affected": [
        {
          "vendor": "Kong",
          "product": "Kong Enterprise Gateway",
          "platforms": [
            "Linux"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "3.15.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "3.15.0.3"
            },
            {
              "version": "3.14.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "3.14.0.12"
            },
            {
              "version": "3.13.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "3.13.0.9"
            },
            {
              "version": "3.12.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "3.12.0.10"
            },
            {
              "version": "3.10.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "3.10.0.17"
            },
            {
              "version": "3.4.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "3.4.3.29"
            }
          ]
        }
      ]
    }
  }
}