Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-114540 DRUPAL-CONTRIB-2026-238EUVD-2026-113534GHSA-jmh3-x5wr-535j

Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Vendor: Drupal Product: Domain Package: drupal/domain Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2.

Affected products

VendorProductAffectedFixed
Drupal Domain 3.0.0 – < 3.0.2 3.0.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/domain >= 3.0.0, < 3.0.2 3.0.2 DRUPAL-CONTRIB-2026-238

Advisories 1

References