CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-3532

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 8.6%

CVSS Severity

CVSS v3 Score 4.2

References

https://www.drupal.org/sa-contrib-2026-027

Products affected by CVE-2026-3532

Bojanz » Openid Connect / Oauth Client » Version: 2.0.0

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:2.0.0
Bojanz » Openid Connect / Oauth Client » Version: 3.0.0

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:3.0.0
Bojanz » Openid Connect / Oauth Client » Version: 7.x-1.0

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:7.x-1.0
Bojanz » Openid Connect / Oauth Client » Version: 7.x-1.1

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:7.x-1.1
Bojanz » Openid Connect / Oauth Client » Version: 7.x-1.2

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:7.x-1.2
Bojanz » Openid Connect / Oauth Client » Version: 7.x-1.3

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:7.x-1.3
Bojanz » Openid Connect / Oauth Client » Version: 8.x-1.0

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:8.x-1.0
Bojanz » Openid Connect / Oauth Client » Version: 8.x-1.1

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:8.x-1.1
Bojanz » Openid Connect / Oauth Client » Version: 8.x-1.2

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:8.x-1.2
Bojanz » Openid Connect / Oauth Client » Version: 8.x-1.3

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:8.x-1.3
Bojanz » Openid Connect / Oauth Client » Version: 8.x-1.4

cpe:2.3:a:bojanz:openid_connect_/_oauth_client:8.x-1.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-3532

Products

Pricing

Contact Us