What’s Vulnerable › Products
Drupal SAML SSO - Service Provider vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Drupal SAML SSO - Service Provider version is affected
Latest Drupal SAML SSO - Service Provider vulnerabilities
- CVE-2026-87953 — SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151 (CVSS 3.3)
- CVE-2026-87952 — SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150 (CVSS 3.1)
- CVE-2026-87951 — SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149 (CVSS 3.8)
- CVE-2026-87950 — SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148 (CVSS 5.3)
- CVE-2026-87949 — SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147 (CVSS 3.3)
- CVE-2026-87948 — SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146 (CVSS 3.5)
- CVE-2026-87947 — SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145 (CVSS 4.8)
- CVE-2026-87946 — SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144 (CVSS 4.8)
- CVE-2026-87945 — SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143 (CVSS 5.4)
- CVE-2026-87944 — SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142 (CVSS 4.8)
- CVE-2026-87943 — SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141 (CVSS 6.5)
- CVE-2026-5343 — SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031 (CVSS 7.4)
- CVE-2026-3217 — SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018 (CVSS 6.1)