Ping Identity vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ping Identity products: 5 record(s), with severity, exploitation and fixes.

PingDirectory 1 PingGateway 1 One-Time Passcode Integration Kit for PingFederate 1 PingIDM 1 PingFederate 1

Exploited only (KEV) →

CVE-2026-80327 Medium · 5.1 CWE-601 Oct 6, 2026

Open Redirect in PingGateway Fragment Filter

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 (and later).

CVE-2026-20746 Medium · 6.3 CWE-401 Jun 12, 2026

PingDirectory copying of virtual attributes leads to memory exhaustion

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values.

CVE-2025-20628 Medium · 6.9 CWE-1220 Apr 7, 2026

Insufficient granularity of access control for Remote Connector Servers in client mode

An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules for Remote Connector Servers (RCS) running in client mode. This means attackers can spoof a client-mode RCS (if one exists) to intercept and/or modify an identity’s security-relevant properties, such as passwords and account recovery information. This issue is exploitable only when an RCS is configured to run in client mode.

CVE-2025-27935 High · 8.6 CWE-306 Dec 4, 2025

Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication.

CVE-2025-26862 None · 0.0 CWE-307 Oct 27, 2025

PingFederate unexpected browser flow initiation in redirectless mode

Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.