CVE-2026-87937

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Central Authentication System CAS Server allows Fake the Source of Data. This issue affects Central Authentication System CAS Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3...

CVE-2026-87937 Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Central Authentication System CAS Server allows Fake the Source of Data. This issue affects Central Authentication System CAS Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3...

CVE-2026-87937

The Drupal Central Authentication System (CAS) Server module (versions 0.0.0 to 2.0.4 and 2.1.0 to 2.1.3 ) is vulnerable to an Open Redirect (CWE-601). The root cause is insufficient validation of the service URL used to redirect users during the logout process , allowing an attacker to redirect ...

CVE-2026-87937 Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Central Authentication System CAS Server allows Fake the Source of Data. This issue affects Central Authentication System CAS Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3...

EUVD-2026-107864

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Central Authentication System CAS Server allows Fake the Source of Data. This issue affects Central Authentication System CAS Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3...

PT-2026-50517

Name of the Vulnerable Software and Affected Versions undici versions 7.23.0 through 7.27.x undici versions 8.0.0 through 8.4.x Description The ProxyAgent in undici silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. This causes the target HTTPS...

CVE-2026-1554: XML Injection (aka Blind XPath Injection)

XML Injection aka Blind XPath Injection vulnerability in Drupal Central Authentication System CAS Server allows Privilege Escalation.This issue affects Central Authentication System CAS Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2...

CVE-2016-9091: Improper Neutralization of Special Elements used in an OS Command

Blue Coat Advanced Secure Gateway ASG 6.6 before 6.6.5.4 and Content Analysis System CAS 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges...

PT-2014-4781

Name of the Vulnerable Software and Affected Versions Blue Coat Content Analysis System CAS versions 1.1 through 1.1.4.1 Description The command-line interface in the affected system allows remote administrators to execute arbitrary commands via unspecified vectors, related to command injection...