🔐 CVE Alert

CVE-2026-114543

UNKNOWN 0.0

Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects Simple User Management versions: from 0.0.0 to 1.11.0.

CWE CWE-863
Vendor drupal
Product simple user management
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal simple user management

Be the first to know when new unknown vulnerabilities affecting drupal simple user management are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Simple User Management
0.0.0 < 1.11.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-239

Credits

Marcus Johansson (marcus_johansson) Scott Euser (scott_euser) Swan Kalata (akalata) Pierre Rudloff (prudloff)