CVE-2026-16639: Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Published Aug 25, 2026
·Updated
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.
Affected Software
1 affected component
Drupal Internationalization Single Sign-On>=0.0.0<=1.8.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Internationalization Single Sign-On (Drupal module)to a version that resolves this vulnerability.Fixed in 1.8.0Patch SA-CONTRIB-2026-081
Event History
Aug 25, 2026
CVE Published
via MITRE·10:22 PM
Data Sourced
via MITRE·10:22 PM
DescriptionWeakness
Data Sourced
via NVD·11:16 PM
DescriptionWeakness