CVE-2026-48491: Domain-fronted mTLS bypass in Traefik SNICheck wildcard TLSOptions

I reported a domain-fronting mTLS bypass in Traefik that was published as CVE-2026-48491 / GHSA-5r4w-85f3-pw66. The issue affected wildcard router TLSOptions on the regular HTTPS/HTTP2 path. A pro...

Jun 11, 2026 security, cve

CVE-2026-46491: Path traversal in SimpleSAMLphp casserver FileSystemTicketStore

I reported a path traversal vulnerability in simplesamlphp-module-casserver that was published as CVE-2026-46491 / GHSA-jrrg-99xh-5j2q. The issue affects deployments that use the file-based CAS ti...

Jun 11, 2026 security, cve