{"vulnerability": "cve-2026-18108", "sightings": [{"uuid": "03c99992-9afa-4354-a996-bddb3ae71d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22", "content": "CVE-2026-18108 - net::saml2\nOlder versions of the Net::SAML2 library for Perl can be tricked into accepting fake login credentials from anyone, not just the intended user. This can happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netsaml2 #timlegge #CVE #infosec", "creation_timestamp": "2026-08-03T21:00:05.605069Z"}, {"uuid": "ab1750e8-3809-4bbf-8e10-7abcd6d3d991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117034101614868174", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to >=0.86 now. #CVE #Perl #infosec\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:10.609885Z"}, {"uuid": "b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms7mnp5hpg2m", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to >=0.86 now. #CVE #Perl #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:16.571596Z"}, {"uuid": "9857f839-9194-4329-8c84-400e49803260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshwxui4542r", "content": "\ud83d\udccc CVE-2026-18108 - Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted... https://www.cyberhub.blog/cves/CVE-2026-18108", "creation_timestamp": "2026-08-07T06:37:07.086341Z"}]}