Improper Check for Unusual Conditions in Drupal Group Invite
CVE-2026-0944

5.3MEDIUM

Key Information:

Vendor

Drupal
Status
Group Invite
Vendor
CVE Published:
4 February 2026

What is CVE-2026-0944?

An improper check for unusual or exceptional conditions in the Drupal Group invite module allows for forceful browsing. This vulnerability can be exploited by users to access resources they should not have access to, potentially compromising the security of sensitive information. The issue affects various versions of the Group invite module, making it essential for users to upgrade to safe releases to mitigate these risks. For more details, visit the official Drupal security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Group invite 0.0.0 < 2.3.9

Group invite 3.0.0 < 3.0.4

Group invite 4.0.0 < 4.0.4

References

https://www.drupal.org/sa-contrib-2026-001

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kevin Quillen (kevinquillen)
eduardo morales alberti
Kevin Quillen (kevinquillen)
Nikolay Lobachev (lobsterr)
Ricardo Sanz Ante (tunic)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
JSON
.