CVE-2026-16647

Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111 PUBLISHED

Description (CNA)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.

Affected (CNA)

Vendor / product	Versions
Drupal / Disable Login Page	affected 0.0.0 before 1.1.4

CWE

CWE-288

References

https://www.drupal.org/sa-contrib-2026-111

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.