Vulnerability in Disable Login Page for Drupal by Drupal
CVE-2026-18260

5.7MEDIUM

Key Information:

Vendor

Drupal
Status
Disable Login Page
Vendor
CVE Published:
25 August 2026

What is CVE-2026-18260?

The vulnerability in the Disable Login Page for Drupal allows unauthorized users to potentially exploit the login mechanism, leading to unauthorized access or manipulation of user sessions. This issue affects all versions of the Disable Login Page module, necessitating prompt attention from site administrators to safeguard their applications against potential exploitation.

Affected Version(s)

Disable Login Page 0.0.0 < 1.1.4

References

https://www.drupal.org/sa-contrib-2026-110

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.