Skip to content
OpenAdvisories
Medium WID-SEC-2026-4138 3 CVEs

Drupal Module (View Unpublished, Simple OAuth und Domain Login Restrict): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Oct 22, 2026 · Updated Oct 29, 2026 · Revision 2 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Drupal (View Unpublished, Simple OAuth und Domain Login Restrict) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Drupal ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.

Vulnerabilities 3

  • Medium 5.4
    CVE-2026-114542

    Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

    Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect version…

    Drupal Simple OAuth (OAuth2) & OpenID Connect drupal/simple_oauth Packagist
  • Medium 5.4
    CVE-2026-114572

    Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.

    Drupal Domain Login Restrict drupal/domain_login_restrict Packagist
  • Medium 5.3
    CVE-2026-114537

    View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235

    Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0.

    Drupal View Unpublished drupal/view_unpublished Packagist

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-113537, EUVD-2026-113530, EUVD-2026-113523

  2. #1

    Initiale Fassung

References