Drupal Module (View Unpublished, Simple OAuth und Domain Login Restrict): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Drupal (View Unpublished, Simple OAuth und Domain Login Restrict) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-41383 linked CVEs
Open advisory with all CVEs
More on Unpublished
Other advisories
- MediumCVE-2026-114542Drupal Module (View Unpublished, Simple OAuth und Domain Login Restrict): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
- MediumCVE-2026-84920Drupal Unpublished Node Permissions: fehlerhafte Autorisierung
- MediumCVE-2026-84920Drupal Unpublished Node Permissions: fehlerhafte Autorisierung
- Not ratedosv:CVE-2026-110218Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL
- Not ratedosv:CVE-2026-57579Alchemy: Unauthenticated nested page API leaks restricted & unpublished content
- Highghsa:GHSA-mqq5-j7w8-2hghAlchemyCMS: Unauthenticated nested page API leaks restricted & unpublished content
- HighCVE-2026-57579AlchemyCMS: Unauthenticated nested page API leaks restricted & unpublished content
- HighCVE-2026-4933Drupal Unpublished Node Permissions: fehlerhafte Autorisierung
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4138
ID