CVE-2026-16639

Published: Aug 25, 2026Modified: Aug 25, 2026

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (1)

https://www.drupal.org/sa-contrib-2026-081

Source: mlhess@drupal.org

Timeline

No history available yet.