CVE-2026-81165

CVE-2026-81165 is an Incorrect Authorization (Access Bypass) vulnerability in the Drupal Blazy module, affecting versions 0.0.0 through 3.0.18 . Blazy enables users to display a field of a target entity through a filter plugin shortcode. The module does not consistently check entity view access, ...