PT-2026-6544

CVE-2026-1917

·

Published

2026-02-04

·

Updated

2026-03-25

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Drupal Login Disable versions prior to 2.1.3
Description A flaw exists in the Login Disable module where the access key check is bypassed when using the HTTP request login route. This allows users to log in without providing the required access key, potentially compromising site security.
Recommendations Update the Login Disable module to version 2.1.3 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-288: Authentication Bypass Using an Alternate Path or Channel
Related identifiers
CVE-2026-1917
DRUPAL-CONTRIB-2026-008
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com