{"id":"CVE-2026-114539","aliases":[],"cve":{"records":[{"id":"CVE-2026-114539","source":"drupal","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-21T17:08:25.388Z","published":"2026-10-30T03:09:31.746Z","modified":"2026-10-30T03:09:31.746Z"}],"publishers":[{"name":"drupal","role":"CNA","organizationId":"2c85b837-eb8b-40ed-9d74-228c62987387","modified":"2026-10-30T03:09:31.746Z"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-237","tags":[],"source":"drupal"}],"weaknesses":[{"id":"CWE-288","description":"CWE-288 Authentication Bypass Using an Alternate Path or Channel","source":"drupal"}],"applicability":[],"prioritization":[]},"title":"DocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237","titleSource":"drupal","descriptionSource":"drupal","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x.","score":null,"severity":"unknown","published":"2026-10-30T03:09:31.746Z","modified":"2026-10-30T03:09:31.746Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Drupal","name":"DocCheck Basic","platforms":[],"versions":[{"version":"7.x","status":"affected","versionType":"semver"}],"cpes":[],"source":"drupal","url":"https://www.cve.org/CVERecord?id=CVE-2026-114539"}],"remediation":[],"references":["https://www.drupal.org/sa-contrib-2026-237"],"sources":[{"name":"CVE","id":"CVE-2026-114539","modified":"2026-10-30T03:09:31.746Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-114539"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T03:38:31.674Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:20:31.211Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T05:30:33.721Z","attemptedAt":"2026-10-30T05:30:33.721Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T05:30:33.999Z","attemptedAt":"2026-10-30T05:30:33.999Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T05:30:35.003Z","attemptedAt":"2026-10-30T05:30:35.003Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T05:30:34.366Z","attemptedAt":"2026-10-30T05:30:34.366Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-114539","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114539","modified":"2026-10-30T04:18:12.797","checkedAt":"2026-10-30T05:30:33.721Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113535","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113535","modified":"Oct 30, 2026, 3:09:31 AM","checkedAt":"2026-10-30T05:30:35.003Z"}],"aiSummary":{"text":"A moderately critical vulnerability in Drupal's DocCheck Basic 7.x allows authentication bypass using an alternate path or channel. The weakness is described as CWE-288. The impact is not fully stated.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:08:59.046Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-114539"}]}}