Central Authentication System Cas Server (Drupal) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-22. Vendor: Drupal.

CVEs of Central Authentication System Cas Server

• CVE-2026-87937 - CVSS 6.5 (medium), 2026-10-22: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This…
• CVE-2026-1554 - CVSS 4.2 (medium), 2026-02-04: XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects…