Vulnerability Description
An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or impersonation.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-21391?
CVE-2026-21391 is a documented vulnerability. An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow...
How severe is CVE-2026-21391?
CVSS scoring is not yet available for CVE-2026-21391. Check NVD for updates.
Is there a patch for CVE-2026-21391?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.