Live › vulnerability › CVE-2026-114530
The Drupal Dopup module has an incorrect authorization flaw that allows forceful browsing, meaning users can reach content or endpoints they should not access by requesting them directly. The sources state the affected range as versions 0.0.0 through 1.0.7 but give no impact details beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Sites running the Drupal Dopup module at versions 0.0.0 through 1.0.7 are in the stated affected range. The sources do not describe which pages or roles are exposed, so unknown.
No product ranges from the sources yet.
drush pm:list or the module's info file) and see whether it falls within 0.0.0 to 1.0.7.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to 1.0.7.
This page as .md · .json · in your agent: get_signal("CVE-2026-114530")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.