CVE-2026-14917highCWE-288

CVE-2026-14917: high-severity vulnerability in Kong Enterprise Gateway

Kong API Gateway Enterprise: SAML Authentication bypass

Published

Follow this CVE+ Monitor Kong Enterprise Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.7epss 0.8%
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without verifying a valid cryptographic signature. As a result, an unauthenticated remote attacker may be able to submit a crafted SAML response and impersonate arbitrary users, including administrators
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
Affected products
Kong · Kong Enterprise Gateway
Related CVEs — Kong Enterprise Gateway

In the same product, most dangerous first.

CVE-2026-6338MEDIUMHTTP request smuggling in Kong Enteprise GatewayEPSS 0.3%CVE-2026-1907HIGHSQL Injection in Clustering Communication (Hybrid Mode)EPSS 0.1%