CVE-2026-114572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...

CVE-2026-114540

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2...

EUVD-2026-113534

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2...

CVE-2026-114540

The Drupal Domain module (versions 3.0.0 to 3.0.2 ) is vulnerable to an incorrect authorization issue within its Domain Access submodule . When the optional per-content-type grant setting is enabled, the module fails to sufficiently verify which domains a user is assigned to. This could allow for...

EUVD-2026-113523

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0...