CVE-2026-73476: External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098

Q: Which deployments should be treated as affected?

Drupal External Authentication installations running versions from 0.0.0 through 2.0.13 are affected.

Q: How can I determine whether my installation is in the affected range?

Check the installed Drupal External Authentication version. Versions up to and including 2.0.13 fall within the stated affected range.

Published Sep 2, 2026

Updated

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.

Affected Software

1 affected component

Drupal External Authentication>=0.0.0<=2.0.13

Event History

Sep 2, 2026

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

DescriptionWeakness

Data Sourced

via NVD·01:18 PM

DescriptionWeakness

Frequently Asked Questions

Which deployments should be treated as affected?

Drupal External Authentication installations running versions from 0.0.0 through 2.0.13 are affected.

How can I determine whether my installation is in the affected range?

Check the installed Drupal External Authentication version. Versions up to and including 2.0.13 fall within the stated affected range.

CVE-2026-73476: External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098

Affected Software

Event History

Frequently Asked Questions

Which deployments should be treated as affected?

How can I determine whether my installation is in the affected range?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be treated as affected?

How can I determine whether my installation is in the affected range?