PatchSiren

prowler-cloud CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL prowler-cloud CVE published 2026-07-10

CVE-2026-59151

CVE-2026-59151 is a critical vulnerability in Prowler, a cloud security platform, that affects its SAML authentication flow. Prior to version 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token. The ACS finish logic in api/src/backend/api/v1/views.py recalculated the tenant from user.email instead of bindi [truncated]