CVE-2026-0948
CVE-2026-0948 · Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4.
CVSS 6.5 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
microsoft entra id sso login
- Versions
- ≥ 0.0.0, < 1.0.4: Affected (semver)
Update to 1.0.4
drupal/social_auth_entra_id Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.4
Update to 1.0.4