Question 1

What is CVE-2026-92439 — CVE-2026-92439?

Accepted Answer

The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.

Question 2

What is the authoritative source for CVE-2026-92439?

Accepted Answer

CVE-2026-92439 (CVE-2026-92439) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-92439CVE-2026-92439

Description

Scoring