CVE-2026-5343

HIGH

SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031

Title source: cna
STIX 2.1

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.

References (1)

Core 1

Scores

CVSS v3 7.4
EPSS 0.0026
EPSS Percentile 16.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-754
Status published
Products (50)
Drupal/SAML SSO - Service Provider 0.0.0 - 3.1.4
miniorange/saml_sso_-_service_provider 7.x-1.0
miniorange/saml_sso_-_service_provider 7.x-1.1
miniorange/saml_sso_-_service_provider 7.x-1.2
miniorange/saml_sso_-_service_provider 7.x-1.3
miniorange/saml_sso_-_service_provider 7.x-1.4
miniorange/saml_sso_-_service_provider 7.x-1.5
miniorange/saml_sso_-_service_provider 7.x-1.6
miniorange/saml_sso_-_service_provider 7.x-1.7
miniorange/saml_sso_-_service_provider 7.x-1.8
... and 40 more
Published May 28, 2026
Tracked Since May 29, 2026