Signature Spoofing Vulnerability in Drupal SAML SSO by Acquia
CVE-2026-87947

Currently unrated

Key Information:

Vendor

Drupal
Status
Saml Sso - Service Provider
Vendor
CVE Published:
22 October 2026

What is CVE-2026-87947?

An improper verification of cryptographic signature vulnerability in the Drupal SAML SSO - Service Provider can lead to signature spoofing. This flaw potentially allows unauthorized users to bypass security measures by sending fraudulent signatures. Affected versions span from 0.0.0 to 3.2.0, necessitating timely updates and increased security measures to prevent exploitation.

Affected Version(s)

SAML SSO - Service Provider 0.0.0 < 3.2.0

References

https://www.drupal.org/sa-contrib-2026-145

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Timo De Clercq (timodc)
Roushan Kumar Singh (roushan59227)
Sudhanshu Dhage (sudhanshu0542)
Bram Driesen (bramdriesen)
Greg Knaddison (greggles)
Heine Deelstra (heine)
Juraj Nemec (poker10)
Jess (xjm)
Swan Kalata (akalata)
.