Authentication Bypass Vulnerability in Drupal SAML SSO by Drupal
CVE-2026-87952

3.1LOW

Key Information:

Vendor

Drupal
Status
Saml Sso - Service Provider
Vendor
CVE Published:
22 October 2026

What is CVE-2026-87952?

The authentication bypass vulnerability in the Drupal SAML SSO - Service Provider allows remote services to gain unauthorized access using stolen credentials. This issue arises from inadequate protection against capture-replay attacks, which can lead to significant security risks, including unauthorized data access and potential service disruptions. Users of affected versions should apply appropriate security measures to safeguard their systems against exploitation.

Affected Version(s)

SAML SSO - Service Provider 0.0.0 < 3.2.0

References

https://www.drupal.org/sa-contrib-2026-150

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Willows (hsjbrianwillows)
Roushan Kumar Singh (roushan59227)
Sudhanshu Dhage (sudhanshu0542)
Bram Driesen (bramdriesen)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
Jess (xjm)
Swan Kalata (akalata)
.