Vulnerabilities

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Drupal

Product

CAPTCHA

Weakness

CWE-288

Exposure class

Web platform

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-118582 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass.

   CVE-2026-118572 Drupal
2. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass.

   CVE-2026-114572 Drupal
3. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass.

   CVE-2026-114539 Drupal
4. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass.

   CVE-2026-107261 Drupal
5. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass.

   CVE-2026-107254 Drupal