Unknown Shibboleth vulnerabilities

• unknown shibboleth Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing CVE-2026-12281 8.1 HighJuly 15, 2026