PatchTheCVEcentral authentication system server vulnerabilities and fixes
Recent CVEs affecting central authentication system server, with upgrade or downgrade steps. 1 tracked.
Also searched as: centralauthenticationsystemserver.
central authentication system server has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-04. Highest priority: CVE-2026-1554 (score 16/100).
- CVE-2026-1554 MEDIUM 4.2 UPGRADE XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server a
FAQ
How do I fix central authentication system server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is central authentication system server being exploited right now?
None of the tracked central authentication system server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which central authentication system server CVE should I patch first?
CVE-2026-1554 currently ranks highest (16/100): XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server a.