From Dev.to
Keycloak CVE-2026-117691: How a SAML Signature Bypass Skips Authentication
SAML single sign-on is supposed to be the part of your architecture you don't have to think about. The Identity Provider asserts who you are, the Service Provider trusts the signature, and everyone mo...