Mmastodon TechnologyCybersecurity first seen 15 d ago, last 15 d ago, peak #12

Authentication bypass vulnerability disclosed in Drupal REST & JSON API module

Original: 🚨 EUVD-2026-107819 📊 Score: n/a 📦 Product: REST & JSON API Authentication for Drupal 🏢 Vendor: Drupal 📅 Updated: 2026-10

A new vulnerability, tracked as EUVD-2026-107819, has been disclosed in the REST & JSON API Authentication module for Drupal. The flaw allows authentication bypass through an alternate path or channel, meaning attackers could potentially gain access without valid credentials. No severity score has been assigned yet. Administrators running Drupal sites with this module are advised to monitor for patches and review their API authentication settings.

Why now: Security teams are flagging the newly disclosed authentication bypass affecting Drupal API authentication modules.

DrupalEUVD-2026-107819REST & JSON API Authentication module

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107819 📊 Score: n/a 📦 Product: REST & JSON API Authentication for Drupal 🏢 Vendor: Drupal 📅 Updated: 2026-10-22 📝 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass.… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3189364