CVE-2025-13986: Zyxware Disable Login Page

Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass.This issue affects Disable Login Page: from 0.0.0 before 1.1.3.

Affected products

• Zyxware Disable Login Page: before 1.1.3 (fixed in 1.1.3)

Published 2026-01-28. Last modified 2026-06-17.