https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:48:50.565942+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-008 DRUPAL-CONTRIB-2026-008 2026-10-04T12:48:50.569612+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/login_disable

The Login Disable module prevents users from logging in to your Drupal site unless they know the access key to add to the end of the login form page. ( default: <http://example.com/user/login?admin> ) If they provide the access key and have a specific role they can log in.

The module does not check for the access key when using the HTTP request login route. It is possible to use this route to log in without providing the access key.

 https://cve.radiocsirt.org/vuln/euvd-2026-277538 EUVD-2026-277538 2026-10-04T12:48:50.569670+00:00 EUVD-2026-277538 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1917 fkie_cve-2026-1917 2026-10-04T12:48:50.569686+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.

 https://cve.radiocsirt.org/vuln/ghsa-j568-7wm8-fm52 GHSA-j568-7wm8-fm52 2026-10-04T12:48:50.569708+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0312 WID-SEC-W-2026-0312 — Drupal (Login Disable): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T12:48:50.569723+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Drupal im Modul ausnutzen, um Sicherheitsvorkehrungen zu umgehen.