{"identifier":"CVE-2026-103314","cve":{"id":"CVE-2026-103314","description":"A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.","published":"2026-10-19T13:16:53.617000+00:00","modified":"2026-10-29T20:17:23.950000+00:00","status":"Awaiting Analysis","score":7.4,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss_version":"3.1","affected":[],"weaknesses":["CWE-294"],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:85932","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:92342","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-103314","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543879","source":"secalert@redhat.com"}],"kev":null,"kev_checked":true,"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-19T15:06:14.722673Z","id":"CVE-2026-103314","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[],"source":"nvd","retrieved_at":"2026-10-29T23:58:55.006909+00:00","exploited":false,"kev_stale":false,"products":[],"priority":{"label":"Assess exposure and vendor guidance","reasons":["No higher-priority signal is available in the current stored evidence."]},"epss":{"probability":0.00392,"percentile":0.33289,"date":"2026-10-29","stale":false},"version_assessment":null},"news":[],"campaigns":[],"domains":[{"domain":"access.redhat.com","source_url":"https://access.redhat.com/errata/RHSA-2026:85932","investigate_url":"https://investigate.aeglixmind.com/#access.redhat.com"},{"domain":"bugzilla.redhat.com","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543879","investigate_url":"https://investigate.aeglixmind.com/#bugzilla.redhat.com"}],"arsenal_url":"https://arsenal.aeglixmind.com/?cve=CVE-2026-103314","catalog_url":"https://cves.aeglixmind.com/cve/CVE-2026-103314","research_url":"https://investigate.aeglixmind.com/research/cve/CVE-2026-103314","coverage":{"news_candidates_checked":0,"campaign_candidates_checked":0,"bounded":false,"notice":"Exact CVE mentions in stored public excerpts and reviewed campaign content only. A mention is not proof of exploitation, attribution or tool suitability. Missing matches do not establish absence."}}