PingAM vulnerabilities

CVEs whose affected-version data names the PingAM package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-21391Critical· 9.5

1w ago

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication…

▾ MidnightPing Identity · PingAMEPSS 0.45%via NVD