CVE Intelligence

Drupal Central Authentication System (CAS) Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal Central Authentication System (CAS) Server: 1 record(s), with affected versions and fixes.

CVE-2026-1554 Medium · 4.2 CWE-91 Feb 4, 2026
Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007
XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.