Live › vulnerability › CVE-2026-114543
Simple User Management, a Drupal module, has an incorrect authorization check that lets a user reach pages they should not see by browsing directly to their URLs. The sources do not say what data or actions are exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Drupal sites that run the Simple User Management module in versions 0.0.0 through 1.11.0 are in scope. The sources do not say which configuration or roles are needed to reach the affected pages, so the exposure is unknown.
No product ranges from the sources yet.
drush pm:list --filter=simple_user_management or the Extend page), where unknown if the sources do not give the exact command.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects Simple User Management versions: from 0.0.0 to 1.11.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-114543")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.