CVE-2026-87945: SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143

Q: Which installations are affected?

Drupal installations using the SAML SSO - Service Provider module are affected if the module version is from 0.0.0 through 3.2.0.

Q: What is the impact of exploitation?

The vulnerability is an open redirect that can allow an attacker to fake the source of data by redirecting users to an untrusted site.

Published Oct 22, 2026

Updated

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.

Affected Software

1 affected component

Drupal SAML SSO - Service Provider>=0.0.0<=3.2.0

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Drupal installations using the SAML SSO - Service Provider module are affected if the module version is from 0.0.0 through 3.2.0.

What is the impact of exploitation?

The vulnerability is an open redirect that can allow an attacker to fake the source of data by redirecting users to an untrusted site.

CVE-2026-87945: SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143

Affected Software

Event History

Frequently Asked Questions

Which installations are affected?

What is the impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What is the impact of exploitation?