Stop Administrator Login
Monthly
Authentication bypass in the Drupal contributed module Stop Administrator Login 1.0 through 1.6 lets an authenticated high-privilege user reach a protected login path through an alternate route that the module does not cover, yielding partial confidentiality and integrity impact. The vendor has released a patch referenced by Drupal SA-CONTRIB-2026-183, EPSS is 0.18% (7th percentile), and no public exploit has been identified at time of analysis. Consistent with the CVSS 3.8 score and monitor priority, real-world risk is low and exploitation requires existing high-privilege access.
Authentication bypass in the Drupal contributed module Stop Administrator Login 1.0 through 1.6 lets an authenticated high-privilege user reach a protected login path through an alternate route that the module does not cover, yielding partial confidentiality and integrity impact. The vendor has released a patch referenced by Drupal SA-CONTRIB-2026-183, EPSS is 0.18% (7th percentile), and no public exploit has been identified at time of analysis. Consistent with the CVSS 3.8 score and monitor priority, real-world risk is low and exploitation requires existing high-privilege access.