CVE-2026-96387: CWE-288 Authentication Bypass Using an Alternate Path or Channel in Drupal Stop administrator login

This vulnerability, classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel), affects the Drupal Stop administrator login module versions >=1.0 and <1.6. It enables an attacker to bypass authentication controls by exploiting an alternate path or channel, potentially gaining unauthorized administrative access. No CVSS score or detailed exploit information is provided, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to bypass authentication mechanisms and gain unauthorized administrative access to the Drupal site using the Stop administrator login module. This could lead to full control over the affected Drupal installation depending on the privileges granted to the administrator account.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider disabling or restricting access to the Stop administrator login module if possible.