CVE-2026-87937

The Drupal Central Authentication System (CAS) Server module is vulnerable to an open redirect (CWE-601) due to insufficient validation of the service URL during the logout process. This flaw allows an attacker to redirect users to untrusted sites, potentially facilitating data source spoofing. T...