CVE-2019-18632

9.8 criticalEPSS 0.8%

Critical (9.8) in europa eidas-node integration package. EPSS 0.8% chance of exploitation in the next 30 days.

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forged certificate.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2019-10-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

europa:eidas-node_integration_package

References

https://sec-consult.com/en/blog/advisories/15587/
https://sec-consult.com/en/blog/advisories/15587/

Check your stack JSON