CVE-2026-73476
CVE-2026-73476 · External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.
CVSS 5.4 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
external authentication
- Versions
- ≥ 0.0.0, < 2.0.13: Affected (semver)
Update to 2.0.13
drupal/externalauth Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.0.13
Update to 2.0.13