CVE-2025-14840

Published: Jan 28, 2026Modified: Feb 6, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1.

Affected (3)

Products: Bmeme: Http Client Manager

Bmeme

1 product

Http Client Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Bmeme Http Client Manager	Before 9.3.13
Bmeme Http Client Manager	From 10.0.0 to 10.0.2
Bmeme Http Client Manager	Version 11.0.0

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

https://www.drupal.org/sa-contrib-2025-126

Source: mlhess@drupal.org

Vendor Advisory

Timeline

No history available yet.