miniorange.com vulnerabilities
2 published CVEs name miniorange.com among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-77998
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4
miniorange.com · SAML SSO Free for Joomla extension for Joomla
Critical10.0 - CVE-2026-77995
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2
miniorange.com · miniOrange OAuth Client (free) extension for Joomla
Critical10.0