PT-2026-120905

CVE-2026-114530

Published

2026-10-21

Updated

2026-10-30

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dopup versions 0.0.0 through 1.0.7

Description An incorrect authorization issue in the Dopup module, which manages Webforms, allows forceful browsing. The module fails to perform sufficient entity access checking in certain instances, potentially exposing the titles of private Webforms.

Recommendations Update Dopup to a version later than 1.0.7.

Exploitability

Exploit

Fix

Impacts

Researchers