Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-114572 DRUPAL-CONTRIB-2026-249EUVD-2026-113523GHSA-7fp8-3j4p-x5h2

Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by drupal

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.

Affected products

VendorProductAffectedFixed
Drupal Domain Login Restrict 0.0.0 – < 1.5.0 1.5.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/domain_login_restrict < 1.5.0 1.5.0 DRUPAL-CONTRIB-2026-249

Advisories 1

References