CVE Daily

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal...

Critical CVSS 9.8

Overview

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4.

CWE: CWE-288 Published: 2025-08-15T17:15:34.197
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: drupal, unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags