Project:
Project machine name:
doccheck_basicDate:
2026-October-21
Vulnerability:
Access bypass
CVE IDs:
CVE-2026-114539
Description:
This module allows healthcare professionals to log in to a shared account on the Drupal website using their DocCheck credentials.
The module doesn't sufficiently verify the authentication data with DocCheck API in some cases.
Solution:
Install the latest version:
- If you use the doccheck_basic module, upgrade to Doccheck_Basic 2.2.1
Reported By:
Fixed By:
Coordinated By:
- Juraj Nemec (poker10) of the Drupal Security Team