{"id":"CVE-2026-114572","kind":"vulnerability","aliases":["CVE-2026-114572"],"related":[],"title":"Drupal Domain Login Restrict: authentication bypass through alternate login path","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1.5.0.","summary":"Domain Login Restrict, a Drupal module, has an authentication bypass caused by an alternate path or channel to log in. An attacker may be able to get past the login restriction without valid credentials.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["drupal","package","php"],"not_affected_if":["module-not-installed"],"how_to_check":"- Check the installed version of the Domain Login Restrict module with `drush pm:list --filter=domain_login_restrict` or in the Drupal admin under Extend.\n- Confirm whether the module is enabled on the site.","fix":"- Domain Login Restrict versions `0.0.0` to `1.5.0` are affected; move to a version above `1.5.0`, the sources do not name the exact fixed release.","status":"open","published_at":"2026-10-30T04:18:17+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","triaged_at":"2026-10-30T04:29:41+00:00","updated_at":"2026-10-30T04:29:41+00:00","category":"package","confidence":0.4,"triage":{"at":"2026-10-30T04:29:41Z","model":"claude-haiku-5-5","output":{"fix":"- Domain Login Restrict versions `0.0.0` to `1.5.0` are affected; move to a version above `1.5.0`, the sources do not name the exact fixed release.","reach":"internet","title":"Drupal Domain Login Restrict: authentication bypass through alternate login path","impact":"high","summary":"Domain Login Restrict, a Drupal module, has an authentication bypass caused by an alternate path or channel to log in. An attacker may be able to get past the login restriction without valid credentials.","audience":"developers","category":"package","nicknames":[],"who_cares":["drupal","php"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker logs in without valid credentials on the site","analyst_note":"Find the advisory text from the NVD link or the Drupal security advisory to confirm the fixed version and the exact trigger path.","how_to_check":"- Check the installed version of the Domain Login Restrict module with `drush pm:list --filter=domain_login_restrict` or in the Drupal admin under Extend.\n- Confirm whether the module is enabled on the site.","plain_action":"","needs_analyst":true,"not_affected_if":["module-not-installed"],"who_is_affected":"Drupal sites that run the Domain Login Restrict module at version 1.5.0 or earlier. Sites without this module installed are not affected. The sources do not describe the exact configuration needed to trigger the bypass.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000683,"input_tokens":4107,"output_tokens":544,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-114572':13A,16A '-2026':12A,15A '0.0.0':79C '1.5.0':81C 'abl':44B 'affect':73C 'allow':68C 'altern':8A,33B,58C 'attack':41B 'authent':5A,28B,54C,69C 'bypass':6A,29B,55C,70C 'caus':30B 'channel':36B,61C 'credenti':53B 'cve':11A,14A 'domain':2A,20B,65C,74C 'drupal':1A,17B,24B,64C 'get':46B 'issu':72C 'log':38B 'login':3A,9A,21B,49B,66C,75C 'may':42B 'modul':25B 'packag':18B 'past':47B 'path':10A,34B,59C 'php':19B 'restrict':4A,22B,50B,67C,76C 'use':56C 'valid':52B 'version':77C 'vulner':62C 'without':51B","nicknames":[],"mitigations":[],"who_affected":"Drupal sites that run the Domain Login Restrict module at version 1.5.0 or earlier. Sites without this module installed are not affected. The sources do not describe the exact configuration needed to trigger the bypass.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T04:18:17+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114572","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114572","severity":null,"published_at":"2026-10-30T04:18:17+00:00","modified_at":"2026-10-30T04:18:17+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","fetched_at":"2026-10-30T04:28:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}