Description
An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zscaler | Authentication Server | < 6.2r | 6.2r |
Critical · 9.6
CVE-2025-54982
EUVD-2025-23602GHSA-84x5-5f67-wjp4
SAML 2.0 Public Key Validation Issue
Published Aug 5, 2025 · Updated Feb 26, 2026 · Assigned by Zscaler