PingAM vulnerabilities

1 known vulnerability in PingAM from Ping Identity. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.5 Critical severity

  PingAM: Authentication Bypass by Spoofing

  CVE-2026-21391Sep 14, 2026Ping Identity

  An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing