CVE-2026-49283: Php Saml Ssl Key Validation Fail Opencve-2026-49283-php-saml-ssl-key-validation-fail-open
When validating TLS/SSL peer keys or certificates against expected key metadata, a key mismatch must throw an exception or return a failure status. Returning normally without throwing causes validation to succeed on mismatched credentials, leading to authentication bypass.