CVE-2026-87946 | BDVDB-2026-394348 Detail
DrupalSAML SSO - Service Provider
Description#
Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0.
Impact#
CAPEC-112 Brute Force
Weaknesses#
- CWE-208 Observable Timing Discrepancy
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.