Jtenman vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jtenman products: 1 record(s), with severity, exploitation and fixes.

Central Authentication System Server 1

Exploited only (KEV) →

CVE-2026-1554 Medium · 4.2 CWE-91 Feb 4, 2026

Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007

XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Privilege Escalation.This issue affects Central Authentication System (CAS) Server: from 0.0.0 before 2.0.3, from 2.1.0 before 2.1.2.