https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:17:04.004386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-1554 CVE-2026-1554 — Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007 2026-10-03T11:17:04.029956+00:00

Affected: Drupal Central Authentication System (CAS) Server

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.