csirt@kutim:~/threat-intel/cve/CVE-2026-5343

Katalog CVE

CVSS 7.4 · High EPSS 0,34%

Kerentanan Improper Check for Unusual or Exceptional Conditions pada miniorange saml sso - service provider. Skor CVSS 3.1 7.4 (High) menurut CISA ADP.

Deskripsi (NVD)

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Provider allows Privilege Escalation. This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.4.

Rincian

Terbit di NVD
28 Mei 2026
Terakhir diubah
21 Juli 2026
Status NVD
Analyzed
CVSS 3.1
7.4 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-754: Improper Check for Unusual or Exceptional Conditions
EPSS (30 hari)
0,34% peluang dieksploitasi; lebih tinggi dari 25,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
miniorange saml sso - service provider Versi 3.0.1 hingga sebelum 3.1.4
miniorange saml sso - service provider Versi 7.x-1.0
miniorange saml sso - service provider Versi 7.x-1.1
miniorange saml sso - service provider Versi 7.x-1.2
miniorange saml sso - service provider Versi 7.x-1.3
miniorange saml sso - service provider Versi 7.x-1.4
miniorange saml sso - service provider Versi 7.x-1.5
miniorange saml sso - service provider Versi 7.x-1.6
miniorange saml sso - service provider Versi 7.x-1.7
miniorange saml sso - service provider Versi 7.x-1.8
miniorange saml sso - service provider Versi 7.x-1.9
miniorange saml sso - service provider Versi 7.x-1.91
miniorange saml sso - service provider Versi 7.x-1.92
miniorange saml sso - service provider Versi 7.x-1.93
miniorange saml sso - service provider Versi 7.x-1.94
miniorange saml sso - service provider Versi 7.x-1.95
miniorange saml sso - service provider Versi 7.x-1.96
miniorange saml sso - service provider Versi 7.x-1.97
miniorange saml sso - service provider Versi 7.x-1.98
miniorange saml sso - service provider Versi 7.x-1.99
miniorange saml sso - service provider Versi 7.x-1.991
miniorange saml sso - service provider Versi 7.x-1.992
miniorange saml sso - service provider Versi 7.x-1.993
miniorange saml sso - service provider Versi 7.x-1.994
miniorange saml sso - service provider Versi 7.x-1.995
miniorange saml sso - service provider Versi 7.x-2.0
miniorange saml sso - service provider Versi 7.x-2.1
miniorange saml sso - service provider Versi 7.x-2.2
miniorange saml sso - service provider Versi 7.x-2.3
miniorange saml sso - service provider Versi 7.x-2.4
miniorange saml sso - service provider Versi 7.x-2.5
miniorange saml sso - service provider Versi 7.x-2.51
miniorange saml sso - service provider Versi 7.x-2.52
miniorange saml sso - service provider Versi 7.x-2.53
miniorange saml sso - service provider Versi 7.x-2.54
miniorange saml sso - service provider Versi 7.x-2.55
miniorange saml sso - service provider Versi 7.x-2.56
miniorange saml sso - service provider Versi 7.x-2.60
miniorange saml sso - service provider Versi 7.x-2.61
miniorange saml sso - service provider Versi 7.x-2.70
miniorange saml sso - service provider Versi 7.x-2.71
miniorange saml sso - service provider Versi 7.x-2.72
miniorange saml sso - service provider Versi 8.x-1.0
miniorange saml sso - service provider Versi 8.x-1.1
miniorange saml sso - service provider Versi 8.x-1.2
miniorange saml sso - service provider Versi 8.x-1.3
miniorange saml sso - service provider Versi 8.x-1.4
miniorange saml sso - service provider Versi 8.x-1.5
miniorange saml sso - service provider Versi 8.x-1.6
miniorange saml sso - service provider Versi 8.x-1.7
miniorange saml sso - service provider Versi 8.x-1.8
miniorange saml sso - service provider Versi 8.x-1.9
miniorange saml sso - service provider Versi 8.x-1.10
miniorange saml sso - service provider Versi 8.x-1.11
miniorange saml sso - service provider Versi 8.x-1.12
miniorange saml sso - service provider Versi 8.x-1.121
miniorange saml sso - service provider Versi 8.x-1.122
miniorange saml sso - service provider Versi 8.x-2.0
miniorange saml sso - service provider Versi 8.x-2.1
miniorange saml sso - service provider Versi 8.x-2.11

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 77 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.