Authentication Bypass Vulnerability in Drupal Domain Login Restrict
CVE-2026-114572

Currently unrated

Key Information:

Vendor

Drupal

Vendor
CVE Published:
30 October 2026

What is CVE-2026-114572?

A vulnerability in the Domain Login Restrict module of Drupal allows attackers to bypass authentication mechanisms through an alternate path or channel. This issue impacts versions ranging from 0.0.0 to 1.5.0, posing significant security risks as it may enable unauthorized access to restricted areas of the platform. Users and administrators are urged to update to the latest versions promptly to mitigate potential security threats. For further details, visit the official documentation.

Affected Version(s)

Domain Login Restrict 0.0.0 < 1.5.0

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Sunil Pawar (sunilpawar)
Bram Driesen (bramdriesen)
Juraj Nemec (poker10)
.