Vulnerability in Ping Identity Pingfederate

CVE-2025-26862

Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.

EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.