Authentication Bypass Vulnerability in Drupal SAML SSO by Drupal
CVE-2026-87952

Currently unrated

Key Information:

Vendor

Drupal
Status
Saml Sso - Service Provider
Vendor
CVE Published:
22 October 2026

What is CVE-2026-87952?

The authentication bypass vulnerability in the Drupal SAML SSO - Service Provider allows remote services to gain unauthorized access using stolen credentials. This issue arises from inadequate protection against capture-replay attacks, which can lead to significant security risks, including unauthorized data access and potential service disruptions. Users of affected versions should apply appropriate security measures to safeguard their systems against exploitation.

Affected Version(s)

SAML SSO - Service Provider 0.0.0 < 3.2.0

References

https://www.drupal.org/sa-contrib-2026-150

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brian Willows (hsjbrianwillows)
Roushan Kumar Singh (roushan59227)
Sudhanshu Dhage (sudhanshu0542)
Bram Driesen (bramdriesen)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
Jess (xjm)
Swan Kalata (akalata)
.