CVE-2026-114572

UNKNOWN 0.0

Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.

CWE	CWE-288
Vendor	drupal
Product	domain login restrict
Ecosystems	PHP CMS
Industries	WebMedia
Published	Oct 30, 2026

Stay Ahead of the Next One

Get instant alerts for drupal domain login restrict

Be the first to know when new unknown vulnerabilities affecting drupal domain login restrict are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Domain Login Restrict

0.0.0 < 1.5.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

drupal.org: https://www.drupal.org/sa-contrib-2026-249

Credits

Marcus Johansson (marcus_johansson) Sunil Pawar (sunilpawar) Bram Driesen (bramdriesen) Juraj Nemec (poker10)