Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-73476 DRUPAL-CONTRIB-2026-098EUVD-2026-69990GHSA-85hq-q7c6-7j82

External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by drupal

Description

Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.

Affected products

VendorProductAffectedFixed
Drupal External Authentication 0.0.0 – < 2.0.13 2.0.13

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/externalauth < 2.0.13 2.0.13 DRUPAL-CONTRIB-2026-098

Advisories 1

References