Improper Access Control in Drupal Domain Affects Multiple Versions
CVE-2026-114540

Currently unrated

Key Information:

Vendor: Drupal
Status: Domain
Vendor: CVE Published:; 30 October 2026

What is CVE-2026-114540?

An improper access control vulnerability in the Drupal Domain module can lead to forceful browsing, allowing attackers to potentially access sensitive information. This issue affects specific versions of the Domain module, ranging from 3.0.0 to 3.0.2. Users of the affected versions should take immediate action to mitigate any risks associated with this vulnerability.

Affected Version(s)

Domain 3.0.0 < 3.0.2

References

https://www.drupal.org/sa-contrib-2026-238

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 30, 2026
Vulnerability Reserved
Oct 21, 2026

Credit

Frank Mably (mably)

Juraj Nemec (poker10)

CVE-2026-114540 Data

JSON