DeutschShown in its original language — a full translation is planned for a future version.
Drupal (Token Content Access, Disable Login Page und Powerful Surveys): Mehrere Schwachstellen
view advisory published 2026-07-29
Ein Angreifer kann mehrere Schwachstellen in Drupal (Token Content Access, Disable Login Page und Powerful Surveys) ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um nicht näher spezifizierte Auswirkungen zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-18261US | — | — | ||
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*. | ||||
| CVE-2026-18260US | — | — | ||
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0… | ||||
| CVE-2026-18259US | — | — | ||
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2. | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-2587 - CSAF Versionself
- WID-SEC-2026-2587 - Portal Versionself
- Drupal Security Advisory sa-contrib-2026-090 vom 2026-07-29external
- Drupal Security Advisory sa-contrib-2026-091 vom 2026-07-29external
- Drupal Security Advisory sa-contrib-2026-092 vom 2026-07-29external
- Drupal Security Advisory SA-CONTRIB-2026-110 vom 2026-08-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan