What’s Vulnerable › Products

Drupal Central Authentication System (CAS) Server vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Drupal Central Authentication System (CAS) Server version is affected

Latest Drupal Central Authentication System (CAS) Server vulnerabilities

• CVE-2026-87937 — Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135 (CVSS 6.5)
• CVE-2026-1554 — Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007 (CVSS 4.2)