CVEvulnerability
CVE-2026-5343
7.4 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-28
- Last modified
- 2026-07-21
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-754
Description
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation.
This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.
Affected configurations
• miniorange saml sso - service provider (>= 3.0.1 < 3.1.4)
• miniorange saml sso - service provider 7.x-1.0
• miniorange saml sso - service provider 7.x-1.1
• miniorange saml sso - service provider 7.x-1.2
• miniorange saml sso - service provider 7.x-1.3
• miniorange saml sso - service provider 7.x-1.4
• miniorange saml sso - service provider 7.x-1.5
• miniorange saml sso - service provider 7.x-1.6
• miniorange saml sso - service provider 7.x-1.7
• miniorange saml sso - service provider 7.x-1.8
• miniorange saml sso - service provider 7.x-1.9
• miniorange saml sso - service provider 7.x-1.91
• miniorange saml sso - service provider 7.x-1.92
• miniorange saml sso - service provider 7.x-1.93
• miniorange saml sso - service provider 7.x-1.94
• miniorange saml sso - service provider 7.x-1.95
• miniorange saml sso - service provider 7.x-1.96
• miniorange saml sso - service provider 7.x-1.97
• miniorange saml sso - service provider 7.x-1.98
• miniorange saml sso - service provider 7.x-1.99
• miniorange saml sso - service provider 7.x-1.991
• miniorange saml sso - service provider 7.x-1.992
• miniorange saml sso - service provider 7.x-1.993
• miniorange saml sso - service provider 7.x-1.994
• miniorange saml sso - service provider 7.x-1.995
• miniorange saml sso - service provider 7.x-2.0
• miniorange saml sso - service provider 7.x-2.1
• miniorange saml sso - service provider 7.x-2.2
• miniorange saml sso - service provider 7.x-2.3
• miniorange saml sso - service provider 7.x-2.4
• miniorange saml sso - service provider 7.x-2.5
• miniorange saml sso - service provider 7.x-2.51
• miniorange saml sso - service provider 7.x-2.52
• miniorange saml sso - service provider 7.x-2.53
• miniorange saml sso - service provider 7.x-2.54
• miniorange saml sso - service provider 7.x-2.55
• miniorange saml sso - service provider 7.x-2.56
• miniorange saml sso - service provider 7.x-2.60
• miniorange saml sso - service provider 7.x-2.61
• miniorange saml sso - service provider 7.x-2.70
• miniorange saml sso - service provider 7.x-2.71
• miniorange saml sso - service provider 7.x-2.72
• miniorange saml sso - service provider 8.x-1.0
• miniorange saml sso - service provider 8.x-1.1
• miniorange saml sso - service provider 8.x-1.2
• miniorange saml sso - service provider 8.x-1.3
• miniorange saml sso - service provider 8.x-1.4
• miniorange saml sso - service provider 8.x-1.5
• miniorange saml sso - service provider 8.x-1.6
• miniorange saml sso - service provider 8.x-1.7
• miniorange saml sso - service provider 8.x-1.8
• miniorange saml sso - service provider 8.x-1.9
• miniorange saml sso - service provider 8.x-1.10
• miniorange saml sso - service provider 8.x-1.11
• miniorange saml sso - service provider 8.x-1.12
• miniorange saml sso - service provider 8.x-1.121
• miniorange saml sso - service provider 8.x-1.122
• miniorange saml sso - service provider 8.x-2.0
• miniorange saml sso - service provider 8.x-2.1
• miniorange saml sso - service provider 8.x-2.11
… and 17 more
Related
Weakness · CWE (1)
- CWE-754 Improper Check for Unusual or Exceptional Conditions weakness
References
- https://www.drupal.org/sa-contrib-2026-031 Vendor Advisory