Authentication Bypass Vulnerability in Drupal Email Login OTP

CVE-2026-16642

What is CVE-2026-16642?

A significant authentication bypass vulnerability exists in the Email Login OTP module for Drupal, potentially allowing unauthorized access to user accounts. This flaw can be exploited without proper authentication mechanisms being triggered, making it essential for users and administrators to update to the latest versions and apply security measures to safeguard their accounts.

References