Brute Force Vulnerability in Drupal SAML SSO - Service Provider

CVE-2026-87946

What is CVE-2026-87946?

The Drupal SAML SSO - Service Provider is affected by an Observable Timing Discrepancy vulnerability that can be exploited for Brute Force attacks. Versions from 0.0.0 to 3.2.0 are impacted by this issue, potentially allowing attackers to gain unauthorized access by analyzing the response times of authentication requests. It is crucial for users of affected versions to implement mitigations immediately to protect against potential exploitation.

References