Medium severity6.5NVD Advisory· Published Oct 22, 2026· Updated Oct 22, 2026
CVE-2026-87937
CVE-2026-87937
Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 0.0.0 - 2.0.4, 2.1.0 - 2.1.3
Patches
Vulnerability mechanics
References
1News mentions
1- Drupal: 25 Security Advisories Disclosed Together in September 2026 BatchVypr Intelligence · Sep 10, 2026