CVE-2026-20773 — Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint
A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access ex…
Published: 2026-09-14 · CVSS: 8.5 · CVSS 4.0
A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7