CVE-2026-0948
Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005
Summary
Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005
Original description
The description as published by the source.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/social_auth_entra_id
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4"}],"database_specific":{"constraint":"<1.0.4"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org