Authentication Bypass in Drupal Email and SMS Verification Products

CVE-2026-84923

What is CVE-2026-84923?

A vulnerability exists in the Drupal Email Verification, SMS Verification, and OTP Verification modules that allows for authentication bypass through alternate methods. This issue potentially enables unauthorized access to services dependent on user verification features. Affected versions range from 0.0.0 to 2.4.0, making it essential for site administrators to review and update their installations to mitigate the risk. Detailed information can be found on the Drupal Security Advisory page.

References