PT-2026-76590

CVE-2026-73476

Published

2026-08-12

Updated

2026-09-15

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal External Authentication versions 0.0.0 through 2.0.13

Description Improper handling of case sensitivity allows privilege escalation. The module fails to ensure exact matching of externally supplied identity values when storing and looking up authentication mappings under specific database collation configurations. This issue primarily affects sites using certain MySQL or MariaDB collation settings for the authentication mapping storage.

Recommendations Update Drupal External Authentication to a version newer than 2.0.13.

Exploitability

Exploit

Fix

Impacts

Researchers