CVE-2025-46404

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

• CWE-476

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2194Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2194Exploit, Third Party Advisory

Published

Nov 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-46394In tar in BusyBox through 1.37.0, a TAR archive can have fil…3.3
• CVE-2025-46397A flaw was found in xfig. This vulnerability allows possible…7.8
• CVE-2025-46398In xfig diagramming tool, a stack-overflow while running fig…5.5
• CVE-2025-46399A flaw was found in fig2dev. This vulnerability allows avail…5.5
• CVE-2025-4640Out-of-bounds Write vulnerability in PointCloudLibrary pcl a…8.3
• CVE-2025-46400In xfig diagramming tool, a segmentation fault while running…5.5
• CVE-2025-46405When Network Access is configured on a BIG-IP APM virtual se…8.7
• CVE-2025-46406A Privilege Context Switching Error (CWE-270) in the Command…5.6
• CVE-2025-46407A memory corruption vulnerability exists in the BMPv3 Palett…8.8
• CVE-2025-46408An issue was discovered in the methods push.lite.avtech.com.…9.8
• CVE-2025-46409Inadequate encryption strength issue exists in SS1 Ver.16.0.…8.7
• CVE-2025-4641Improper Restriction of XML External Entity Reference vulner…9.3