DRUPAL-CONTRIB-2026-124

vendorUSosv
view advisory published 2026-09-02Licence: per source

This module enables you to add extra layer of verification for user registration. The module doesn't sufficiently validate user-supplied input resulting in an account takeover vulnerability.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-84923US—OT elevated—
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue a…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan