CVE-2026-73476Medium· 5.4▾ SunlitImproper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.3%
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.
external_authentication < 2.0.13external_authentication >= 8.x-1.0, <= 8.x-1.4Upgrade past the affected range:
external_authentication 2.0.13Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109411High· 8.1Samba: access control bypass via vfs_ceph_rgw case-insensitive open
CVE-2026-116135NoneHTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them
CVE-2026-108313Medium· 6.6Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
CVE-2026-105608High· 8.8Consul vulnerable to an authorization bypass in service mesh registration
CVE-2026-116469High· 7.1MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding
CVE-2026-114132Medium· 6.3Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive