John-Jung/CVE-2026-25604-PoC

PoC

A PoC for demonstrating CVE-2026-25604

view exploit source poc_in_githubauthor John-Jungpublished 2026-04-22catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-25604US	—	0.37% (30th)	Exploit	2026-03-09
In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.