Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-114543 DRUPAL-CONTRIB-2026-239EUVD-2026-113533GHSA-c6fg-w63m-mwwv

Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239

Published Oct 30, 2026 · Updated Nov 12, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects Simple User Management versions: from 0.0.0 to 1.11.0.

Affected products

VendorProductAffectedFixed
Drupal Simple User Management 0.0.0 – < 1.11.0 1.11.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/simple_user_management < 1.11.0 1.11.0 DRUPAL-CONTRIB-2026-239

Advisories 1

References