Veille CVE

Semaine du 19 octobre au 25 octobre 2026

11 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 2 Non évaluée 9 Exploitées (KEV) Tri : plus récentes « Drupal SAML SSO - Service Provider » ✕
  1. CVE-2026-87953 3.3 Faible

    Drupal SAML SSO - Service Provider

    Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  2. CVE-2026-87952 3.1 Faible

    Drupal SAML SSO - Service Provider

    Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  3. CVE-2026-87951 – Non évaluée

    Drupal SAML SSO - Service Provider

    Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  4. CVE-2026-87950 – Non évaluée

    Drupal SAML SSO - Service Provider

    Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  5. CVE-2026-87949 – Non évaluée

    Drupal SAML SSO - Service Provider

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  6. CVE-2026-87948 – Non évaluée

    Drupal SAML SSO - Service Provider

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  7. CVE-2026-87947 – Non évaluée

    Drupal SAML SSO - Service Provider

    Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  8. CVE-2026-87946 – Non évaluée

    Drupal SAML SSO - Service Provider

    Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  9. CVE-2026-87945 – Non évaluée

    Drupal SAML SSO - Service Provider

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  10. CVE-2026-87944 – Non évaluée

    Drupal SAML SSO - Service Provider

    Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

  11. CVE-2026-87943 – Non évaluée

    Drupal SAML SSO - Service Provider

    Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.