CVE-2026-1917
CVE-2026-1917 · Login Disable - Less critical - Access bypass - SA-CONTRIB-2026-008
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
login disable
- Versions
- ≥ 0.0.0, < 2.1.3: Affected (semver)
Update to 2.1.3
drupal/login_disable Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.1.3
Update to 2.1.3