Improper access control in External Authentication - CVE-2026-73476
Published: August 13, 2026
Vulnerability identifier: #VU142264
CSH Severity: Medium
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-73476
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to the affected module does not sufficiently ensure exact matching of externally supplied identity values when storing and looking up authentication mappings under certain database collation configurations. A remote user can bypass implemented security restrictions and gain unauthorized access to the application.
Affected software
External Authentication
How to mitigate CVE-2026-73476
Install updates from vendor's website.
External Authentication - update to 2.0.13