CVE-2026-71450: Johnson Controls EasyIO Neo EC and CW Edge Controller: Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge…

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass. This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 through EC 3.3b63 and from CW 3.3b24 through CW 3.3b25...

CVE-2026-118572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAuth OIDC SSO versions: from 0.0.0 to 3.1.1...

CVE-2026-118554

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

CVE-2026-107261

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107254

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107254

The Drupal Authenticator Login Plus (2FA) module (versions 0.0.0 to 1.0.1 ) contains an Authentication Bypass Using an Alternate Path or Channel vulnerability (CWE-288). The root cause is that the module fails to enforce the second factor when a user authenticates using a Drupal core one-time log...

CVE-2026-107254 Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

EUVD-2026-113578

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107261

The Authenticator Login Plus (2FA) module for Drupal is vulnerable to an Authentication Bypass Using an Alternate Path or Channel (CWE-288). This flaw may allow a user to log in using only a password, even when the site-wide enforcement of two-factor authentication (2FA) is enabled. This issue af...

EUVD-2026-113574

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107261 Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-114539

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x...

CVE-2026-114572

The Domain Login Restrict module for Drupal (versions 0.0.0 to 1.5.0) is vulnerable to an Authentication Bypass (CWE-288) because it fails to sufficiently enforce login restrictions when users authenticate via methods other than the standard login form. This allows users to log in to domains they...

CVE-2026-118572 OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAuth OIDC SSO versions: from 0.0.0 to 3.1.1...

CVE-2026-118554 OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

CVE-2026-118554: Drupal OpenID Connect Client: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

CVE-2026-118572: Drupal OAuth Login - OAuth OIDC SSO: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAuth OIDC SSO versions: from 0.0.0 to 3.1.1...

CVE-2026-107254: Drupal Authenticator Login Plus (2FA): Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-114539: Drupal DocCheck Basic: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x...

CVE-2026-107261: Drupal Authenticator Login Plus (2FA): Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows…

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...