Live › vulnerability › CVE-2026-114539
The Drupal DocCheck Basic module, version 7.x, has an authentication bypass that lets a request skip the normal login check through an alternate path or channel. An attacker who exploits it can gain access to functions that should require a logged-in account.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Sites running Drupal 7 with the DocCheck Basic module installed are in scope. The sources do not say which configurations or endpoints are exposed, so whether a given site is reachable by an attacker is unknown.
No product ranges from the sources yet.
drush pm-list or by looking in the sites/all/modules directory).No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x.
This page as .md · .json · in your agent: get_signal("CVE-2026-114539")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.