Signature Spoofing Vulnerability in Drupal SAML SSO by Acquia
CVE-2026-87947

4.8MEDIUM

Key Information:

Vendor

Drupal
Status
Saml Sso - Service Provider
Vendor
CVE Published:
22 October 2026

What is CVE-2026-87947?

An improper verification of cryptographic signature vulnerability in the Drupal SAML SSO - Service Provider can lead to signature spoofing. This flaw potentially allows unauthorized users to bypass security measures by sending fraudulent signatures. Affected versions span from 0.0.0 to 3.2.0, necessitating timely updates and increased security measures to prevent exploitation.

Affected Version(s)

SAML SSO - Service Provider 0.0.0 < 3.2.0

References

https://www.drupal.org/sa-contrib-2026-145

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Timo De Clercq (timodc)
Roushan Kumar Singh (roushan59227)
Sudhanshu Dhage (sudhanshu0542)
Bram Driesen (bramdriesen)
Greg Knaddison (greggles)
Heine Deelstra (heine)
Juraj Nemec (poker10)
Jess (xjm)
Swan Kalata (akalata)
.