CVE-2026-114537

The View Unpublished module for Drupal (versions 0.0.0 to 1.5.0) contains an Incorrect Authorization vulnerability (CWE-863) that allows Forceful Browsing . The module incorrectly grants users with the "access content" permission view access to published translations of nodes that also possess at...

EUVD-2026-113537

Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0...

EUVD-2026-113534

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2...

CVE-2026-114540

The Drupal Domain module (versions 3.0.0 to 3.0.2 ) is vulnerable to an incorrect authorization issue within its Domain Access submodule . When the optional per-content-type grant setting is enabled, the module fails to sufficiently verify which domains a user is assigned to. This could allow for...

CVE-2026-114540 Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2...

CVE-2026-114543

The Simple User Management module for Drupal (versions 0.0.0 to 1.11.0) contains an Incorrect Authorization vulnerability (CWE-863) allowing Forceful Browsing . The module fails to sufficiently validate role delegation when approving users and lacks protection for user 1 against deactivation or d...

EUVD-2026-113533

Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects Simple User Management versions: from 0.0.0 to 1.11.0...

EUVD-2026-113531

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...

CVE-2026-114553 Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...

CVE-2026-114553

The Drupal Frontend Editing module (versions 0.0.0 to 1.9.3 ) is vulnerable to an incorrect authorization issue that allows Forceful Browsing . The root cause is that the module fails to sufficiently check field access permissions when users add, edit, or delete paragraph items in entity referenc...

EUVD-2026-113529

Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6...

CVE-2026-114544 Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243

Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6...

CVE-2026-114544

The Drupal Media Bulk Upload module (versions 0.0.0 to 3.0.6 ) contains an Incorrect Authorization vulnerability (CWE-863) that enables Forceful Browsing . The root cause is that the module fails to sufficiently verify user permissions when creating specific media types if the bulk upload form is...

EUVD-2026-113528

Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalendar View versions: from 0.0.0 to 5.2.6...

CVE-2026-114545

The Fullcalendar View module for Drupal (versions 0.0.0 to 5.2.6 ) contains an Incorrect Authorization vulnerability (CWE-863) that allows for an access bypass. Specifically, the module fails to verify field-level access when updating entity fields. While this allows unauthorized updates to speci...

CVE-2026-114547

The Drupal TinyPNG component (versions 0.0.0 to 2.0.2 ) is vulnerable to a Missing Authorization vulnerability (CWE-862) that enables Forceful Browsing . This flaw allows unauthorized access to information disclosure. No specific exploit information or remediation steps are provided in the docume...

EUVD-2026-113526

Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2...

CVE-2026-114547 TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246

Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2...

EUVD-2026-113521

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1...

CVE-2026-114554

The Drupal AI File to Text module (versions 0.0.0 to 1.0.1) contains an Incorrect Authorization vulnerability (CWE-863) that allows for Forceful Browsing . The module fails to sufficiently verify if a user is permitted to view a file before extracting its content for use as an AI tool. This allow...