{"id":"CVE-2026-92439","aliases":[],"cve":{"records":[{"id":"CVE-2026-92439","source":"Kong","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-16T10:24:50.014Z","published":"2026-11-10T21:36:59.579Z","modified":"2026-11-13T14:32:24.427Z"}],"publishers":[{"name":"Kong","role":"CNA","organizationId":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","modified":"2026-11-10T21:36:59.579Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T14:32:24.427Z"}],"references":[{"url":"https://developer.konghq.com/gateway/changelog/","tags":["release-notes"],"source":"Kong"},{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":["release-notes"],"source":"Kong"}],"weaknesses":[{"id":"CWE-287","description":"CWE-287 Improper Authentication","source":"Kong"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T14:32:01.854693Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be…","titleSource":"Kong","descriptionSource":"Kong","description":"The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.","score":7.8,"severity":"high","published":"2026-11-10T21:36:59.579Z","modified":"2026-11-13T14:32:24.427Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Kong Inc.","name":"Kong Gateway Enterprise","platforms":[],"versions":[{"version":"3.10.0.0","status":"affected","lessThan":"3.10.0.20","versionType":"custom"},{"version":"3.13.0.0","status":"affected","lessThan":"3.13.0.12","versionType":"custom"},{"version":"3.14.0.0","status":"affected","lessThan":"3.14.0.17","versionType":"custom"},{"version":"3.15.0.0","status":"affected","lessThan":"3.15.0.7","versionType":"custom"},{"version":"3.16.0.0","status":"affected","lessThan":"3.16.0.2","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92439"},{"vendor":"Kong Inc.","name":"Kong AI Gateway","platforms":[],"versions":[{"version":"2.2.0","status":"affected","lessThan":"2.2.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92439"}],"remediation":[],"references":["https://developer.konghq.com/gateway/changelog/","https://developer.konghq.com/ai-gateway/changelog/"],"sources":[{"name":"CVE","id":"CVE-2026-92439","modified":"2026-11-13T14:32:24.427Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-92439"}],"assessments":[{"source":"Kong","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","score":7.8}],"sourceAffected":[],"observedAt":"2026-11-13T20:41:57.366Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:30:32.029Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-10T22:45:34.977Z","attemptedAt":"2026-11-10T22:45:34.977Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-10T22:45:35.361Z","attemptedAt":"2026-11-10T22:45:35.361Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-10T22:45:35.820Z","attemptedAt":"2026-11-10T22:45:35.820Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-10T22:45:34.805Z","attemptedAt":"2026-11-10T22:45:34.805Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-92439","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92439","modified":"2026-11-10T22:21:14.740","score":7.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-10T22:45:34.977Z"}],"aiSummary":{"text":"Kong Gateway Enterprise and Kong AI Gateway have a vulnerability where the SAML plugin does not enforce AudienceRestriction, allowing a valid assertion to be replayed. Affected versions include Kong Gateway Enterprise 3.10.0.0 to 3.10.0.19, 3.13.0.0 to 3.13.0.11, 3.14.0.0 to 3.14.0.16, 3.15.0.0 to 3.15.0.6, and 3.16.0.0 to 3.16.0.1, as well as Kong AI Gateway 2.2.0. The weakness is related to improper authentication.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T11:36:08.370Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-92439"}]}}