CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2026/02/06 1:26 a.m.•14 views

CVE-2026-0948

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4...

6.5CVSS5.8AI score0.00232EPSS

SaveExploits0References1

NVD•added 2026/02/04 9:15 p.m.•23 views

CVE-2026-0948

6.5CVSS0.00232EPSS

SaveExploits0References1

CVE•added 2026/02/04 8:26 p.m.•44 views

CVE-2026-0948

The Drupal Microsoft Entra ID SSO Login module (versions prior to 1.0.4 ) is vulnerable to an authentication bypass using an alternate path or channel. The root cause is that the module does not sufficiently validate API responses received from the Microsoft Entra ID service. This flaw allows an ...

6.5CVSS5.8AI score0.00232EPSS

SaveExploits0References1Affected Software1

osv_cve•added 2026/02/04 8:26 p.m.•12 views

CVE-2026-0948 Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005

6.5CVSS5.9AI score

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by