CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 4,612 CVEs published, 309 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
4,612
Show in the list
Critical, last 7 days
309
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,754
Show in the list

Showing CVEs that name the product drupal:saml_sso_service_provider. Show all products

12 CVEs, showing 1 to 12
CVESeverityTitlePublished
CVE-2026-5343High 7.4SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
Assigned by drupal
May 28, 2026
CVE-2026-87953Not yet scoredSAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151
Assigned by drupal
Oct 22, 2026
CVE-2026-87952Not yet scoredSAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150
Assigned by drupal
Oct 22, 2026
CVE-2026-87951Not yet scoredSAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149
Assigned by drupal
Oct 22, 2026
CVE-2026-87950Not yet scoredSAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148
Assigned by drupal
Oct 22, 2026
CVE-2026-87949Not yet scoredSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147
Assigned by drupal
Oct 22, 2026
CVE-2026-87948Not yet scoredSAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146
Assigned by drupal
Oct 22, 2026
CVE-2026-87947Not yet scoredSAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145
Assigned by drupal
Oct 22, 2026
CVE-2026-87946Not yet scoredSAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144
Assigned by drupal
Oct 22, 2026
CVE-2026-87945Not yet scoredSAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143
Assigned by drupal
Oct 22, 2026
CVE-2026-87944Not yet scoredSAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
Assigned by drupal
Oct 22, 2026
CVE-2026-87943Not yet scoredSAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141
Assigned by drupal
Oct 22, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.