Known Vulnerabilities for External Authentication by Drupal
Listed below are 10 of the newest known vulnerabilities associated with "External Authentication" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-90443 json | A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encodi... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-88035 json | A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name ... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-87015 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-86756 json | Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint (SamlController:... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-86115 json | Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SS... | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-82645 json | AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_restreams/getLiveK... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-81913 json | Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a si... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-78387 json | RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoin... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-75501 json | A vulnerability in the Calix EXOS firmware for the GS7 XGS (GS5239XG) residential router allows unauthenticated remote attack... | Not Provided | 2026-08-21 | 2026-08-25 |
| CVE-2026-74241 json | A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDA... | Not Provided | 2026-08-14 | 2026-08-17 |