PT-2026-89249

CVE-2026-87950

Published

2026-09-09

Updated

2026-10-22

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal SAML SSO - Service Provider versions 0.0.0 through 3.2.0

Description The module allows a Drupal site to function as a SAML 2.0 Service Provider for external identity provider authentication. It contains hard-coded credentials that may allow the retrieval of embedded sensitive data and the disclosure of information regarding associated services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors