CVE-2026-16639

CriticalCVSS 9.8

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects versions from 0.0.0 to 1.8.0.

Risk Assessment

An attacker may gain access to accounts without proper authentication, potentially leading to unauthorized system access.

Recommendation

Update the Internationalization Single Sign-On module to a version above 1.8.0 that includes the fix.

Original NVD description (English source)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.