Incorrect Authorization Vulnerability in Dopup by Drupal

CVE-2026-114530

What is CVE-2026-114530?

The Dopup module for Drupal contains an incorrect authorization vulnerability that could allow an attacker to exploit forceful browsing techniques. This weakness permits unauthorized access to restricted areas of the application, which can potentially lead to exposure of sensitive data or compromising user accounts. The issue is found in all versions of Dopup from 0.0.0 up to and including 1.0.7, making it crucial for users to apply updates and patches to safeguard against potential exploitation. For more details, visit the official Drupal advisory.

References