CVE-2026-87937 Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Central Authentication System CAS Server allows Fake the Source of Data. This issue affects Central Authentication System CAS Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3...

CVE-2026-87945 SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87945

The Drupal SAML SSO - Service Provider module (specifically the miniorange_saml module) is vulnerable to an Open Redirect (CWE-601) in versions 0.0.0 through 3.2.0 . The root cause is the failure to sufficiently validate certain user-supplied URLs before performing redirects. An attacker can expl...

CVE-2026-87945 SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

PT-2026-102941

Name of the Vulnerable Software and Affected Versions Mediawiki - Collection extension versions prior to 1.46.1 Mediawiki - Collection extension version 1.45.5 Mediawiki - Collection extension version 1.43.10 Description An open redirect issue exists in the Mediawiki - Collection extension, which...

CVE-2026-19441: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-11348: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. Liman MYS allows Fake the Source of Data. This issue affects Liman MYS: before release.Master.1107...