VULNERABILITY INTELLIGENCE
CVE-2025-26862
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-10-27
Last modified2026-10-08
Description
Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.
Weakness classification
- responsible-disclosure@pingidentity.com: CWE-307