---
id: "CVE-2026-96387"
kind: "vulnerability"
aliases: ["CVE-2026-96387"]
title: "Drupal Stop administrator login module: authentication bypass via alternate path"
severity: "low"
cvss: 3.8
epss: 0.00201
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["drupal", "other", "php"]
not_affected_if: ["module-not-installed"]
published_at: "2026-10-22T02:17:08+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-25T04:43:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96387", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-96387", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# Drupal Stop administrator login module: authentication bypass via alternate path

The Stop administrator login module for Drupal versions 1.0 through 1.6 has an authentication bypass that uses an alternate path or channel to log in. An attacker may be able to reach administrator access without the normal login checks.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the Stop administrator login module with `drush pm:list --filter=stop_admin_login` or by reviewing `composer show` output (unknown module machine name in sources)
- Confirm whether the module is enabled on the site at `/admin/modules`

## Fix

- Upgrade the Stop administrator login module to a version later than `1.6` (exact fixed version unknown from sources)

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96387
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-96387

## From the sources

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrator login versions: from 1.0 to 1.6.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_