CVE-2025-14840

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1.

Score

CVSS 3.1 7.5 High

Status

Analyzed - mlhess@drupal.org

Published

2026-01-28

Last modified

2026-01-29

Weaknesses

CWE-754

Affected products

• Http Client Manager (Bmeme)
• Http Client Manager (Drupal)

References

• https://www.drupal.org/sa-contrib-2025-126