Drupal Disable Login Page vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Drupal Disable Login Page: 3 record(s), with affected versions and fixes.
CVE-2026-16647
Medium · 4.1
CWE-288 Sep 2, 2026
Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2026-18260
Medium · 5.7
CWE-307 Aug 25, 2026
Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2025-13986
Medium · 4.2
CWE-288 Jan 28, 2026
Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.This issue affects Disable Login Page: from 0.0.0 before 1.1.3.