TI-2026-79090 CVE-2026-87943 · GHSA-24w5-973r-xvrv
Missing authorization in Drupal SAML SSO - Service Provider module
Priority LOW 34
Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing.
Vulnerabilities
11 records
TI-2026-79091 CVE-2026-87944 · GHSA-3jrq-h93g-pqq2
Improper certificate validation in Drupal SAML SSO - Service Provider
Priority LOW 21
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM).
TI-2026-79092 CVE-2026-87945 · GHSA-5wg3-cvm2-2f2f
Open redirect in Drupal SAML SSO - Service Provider module
Priority LOW 24
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data.
TI-2026-79093 CVE-2026-87946 · GHSA-rcqp-4hgq-whp9
Observable timing discrepancy in Drupal SAML SSO - Service Provider
Priority LOW 21
Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force.
TI-2026-79094 CVE-2026-87947 · GHSA-5pph-9jmv-4qpx
Signature verification flaw in Drupal SAML SSO module allows spoofing
Priority LOW 21
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof.
TI-2026-79095 CVE-2026-87948 · GHSA-3rh3-hg6v-m22c
Cross-site scripting in Drupal SAML SSO - Service Provider
Priority LOW 16
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).
TI-2026-79096 CVE-2026-87949 · GHSA-68wf-6pf7-533v
Cross-site scripting in Drupal SAML SSO - Service Provider
Priority LOW 15
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS).
TI-2026-79097 CVE-2026-87950 · GHSA-h3f7-r4h6-pvmw
Hard-coded credentials in Drupal SAML SSO Service Provider module
Priority LOW 30
Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data.
TI-2026-79098 CVE-2026-87951 · GHSA-x5c7-wwc5-m386
Insecure storage in Drupal SAML SSO module exposes sensitive data
Priority LOW 18
Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data.
TI-2026-79099 CVE-2026-87952 · GHSA-899f-rjw2-fh3g
Capture-replay flaw in Drupal SAML SSO allows authentication bypass
Priority LOW 15
Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials.
TI-2026-79100 CVE-2026-87953 · GHSA-g2mw-85mc-w5h7
Server-side request forgery in Drupal SAML SSO - Service Provider
Priority LOW 15
Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery.