CVE-2026-1554 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Cent…
Medium CVSS: 4.2

CVE-2026-1554

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.
Vendor
Jtenman
Product
Central Authentication System Server
CWE
CWE-91
Yayın Tarihi
2026-02-04 21:15:59
Güncelleme
2026-02-11 19:18:19
Source Identifier
mlhess@drupal.org
KEV Date Added
-

Kategoriler

CWE-91 Central Authentication System Server MEDIUM Jtenman 2026

Referanslar

https://www.drupal.org/sa-contrib-2026-007