View online: https://www.drupal.org/sa-contrib-2026-237 Project: DocCheck Basic [1] Project machine name: doccheck_basic Date: 2026-October-21 Security risk: *Moderately critical* 12 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Default [2] Vulnerability: Access bypass CVE IDs: CVE-2026-114539 Description: This module allows healthcare professionals to log in to a shared account on the Drupal website using their DocCheck credentials. The module doesn't sufficiently verify the authentication data with DocCheck API in some cases. Solution: Install the latest version: * If you use the doccheck_basic module, upgrade to Doccheck_Basic 2.2.1 [3] Reported By: * Rodel Duterte (rduterte) [4] Fixed By: * sleitner [5] Coordinated By: * Juraj Nemec (poker10) [6] of the Drupal Security Team ------------------------------------------------------------------------------ Contribution record [7] [1] https://www.drupal.org/project/doccheck_basic [2] https://www.drupal.org/drupal-security-team/security-risk-levels-defined [3] https://www.drupal.org/project/doccheck_basic/releases/2.2.1 [4] https://www.drupal.org/u/rduterte [5] https://www.drupal.org/u/sleitner [6] https://www.drupal.org/u/poker10 [7] https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal....