Live › vulnerability › CVE-2026-87945
Go to dashboardThe Drupal SAML SSO - Service Provider module redirects users to URLs an attacker can choose, so a crafted link can send a visitor to a malicious site. The advisory describes it as letting an attacker fake the source of data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Drupal SAML SSO - Service Provider module at version 3.2.0 or earlier that use it for single sign-on. Sites without this module are not affected.
No product ranges from the sources yet.
drush pm:list --filter=saml or the module list at /admin/modules.3.2.0 as affected, per the description.3.2.0. The fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-87945")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.