Drupal SAML SSO Pro Improper Cryptographic Sign Verification (v0-3.2)
CVE-2026-87947 Published on October 22, 2026
SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.
Weakness Type
Improper Verification of Cryptographic Signature
The software does not verify, or incorrectly verifies, the cryptographic signature for data.
Affected Versions
Drupal SAML SSO - Service Provider:- Version 0.0.0 and below 3.2.0 is affected.