CVE-2026-87937 — Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135

CVE-2026-87937

Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135 PUBLISHED

Description (CNA)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.

Affected (CNA)

Vendor / product	Versions
Drupal / Central Authentication System (CAS) Server	affected 0.0.0 before 2.0.4; affected 2.1.0 before 2.1.3

CWE

CWE-601

References

https://www.drupal.org/sa-contrib-2026-135

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.