CVE-2026-41005: Cloud Foundry UAA SAML Signature Bypass

**CVE-2026-41005 — Cloud Foundry UAA SAML authentication bypass:** A critical (CVSS 9.0) vulnerability allows an attacker who can obtain the SP encryption key and reach UAA SAML endpoints to forge encrypted but unsigned SAML assertions and gain authenticated access, including impersonation of administrators and issuance of OAuth tokens; primary remediation is to set wantAssertionSigned=true, rotate SP keys if exposed, and apply vendor patches.