https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:04:41.894872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-098 DRUPAL-CONTRIB-2026-098 2026-10-02T09:04:41.900405+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/externalauth

This module enables you to authenticate Drupal users against external identity providers.

The module does not sufficiently ensure exact matching of externally supplied identity values when storing and looking up authentication mappings under certain database collation configurations.

This vulnerability is minimally mitigated by the fact that it affects only sites using impacted MySQL or MariaDB collation settings for the module’s authentication mapping storage. Affected collations are quite common so all sites are encouraged to upgrade.

 https://cve.radiocsirt.org/vuln/euvd-2026-363281 EUVD-2026-363281 2026-10-02T09:04:41.900500+00:00 EUVD-2026-363281 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73476 fkie_cve-2026-73476 2026-10-02T09:04:41.900530+00:00

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.

 https://cve.radiocsirt.org/vuln/ghsa-85hq-q7c6-7j82 GHSA-85hq-q7c6-7j82 2026-10-02T09:04:41.900569+00:00

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2826 WID-SEC-W-2026-2826 — Drupal Module: Mehrere Schwachstellen 2026-10-02T09:04:41.900585+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.