CVE-2026-87937None▾ SunlitURL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.
central_authentication_system_cas_server >= 0.0.0 < 2.0.4central_authentication_system_cas_server >= 2.1.0 < 2.1.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-87945NoneSAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143
CVE-2026-96386NoneSmart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190
CVE-2026-96382NoneDiba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191
CVE-2026-96392NoneAI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187
CVE-2026-96380NoneCSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189
CVE-2026-96377NoneCombined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188