enterprise_gateway vulnerabilities

CVEs whose affected-version data names the enterprise_gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-14917High· 7.7

1w ago

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity f…

▾ TwilightKong · Kong Enterprise GatewayEPSS 0.69%via NVD