PingFederate vulnerabilities

CVEs whose affected-version data names the PingFederate package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-20773High· 8.5

1w ago

A role-based access control issue was identified in the administrative expression evaluation functionality

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissi…

▾ TwilightPing Identity · PingFederateEPSS 0.21%via NVD