CVE-2025-14840

—

CVSS 3.1

7.5 high

EPSS

<1%p20

Published

Jan 28, 2026 (Jan 28, 2026)

Modified

Jun 17, 2026

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1.

Vendors: bmeme
Products: http client manager
Ecosystems: Drupal
Weakness: CWE-754
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.