CRITICAL🇵🇱 Wersja polska

CVE-2026-42354

CVSS 9.1v3.1pub. 2026-05-08upd. 2026-05-18

Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim email address must be known in order to exploit this vulnerability. This issue has been patched in version 26.4.1.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Sentry

    APP
    Sentry
    21.12.0 – 26.4.1 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-27197CRITICAL9.1PL ✓ten sam produkt

Sentry SAML SSO — przejęcie konta użytkownika (Auth Bypass)

CVE-2026-52794HIGH7.5ten sam produkt

Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression De...

CVE-2021-47935HIGH8.7ten sam produkt

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute ar...

CVE-2024-45606HIGH7.1ten sam produkt

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute...

CVE-2024-41656HIGH7.1ten sam produkt

Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to versi...