Project: 
Dopup
Project machine name: 
dopup
Date: 
2026-October-21
Security risk: 
Critical 15 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Information disclosure
Affected versions: 
<1.0.7
CVE IDs: 
CVE-2026-114530
Description: 

The Dopup module provides functionality for selecting and working with Webforms.

The module does not perform sufficient entity access checking in some cases and may expose the title of private Webforms.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: