CVE-2026-96387
CVE-2026-96387 · Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrator login versions: from 1.0 to 1.6.
CVSS 3.8 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
stop administrator login
- Versions
- ≥ 1.0, < 1.6: Affected (semver)
Update to 1.6
drupal/stop_admin Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.6.0
Update to 1.6.0