CVE-2026-107311

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41...

CVE-2026-107266

Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1...

CVE-2026-107263

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7...

CVE-2026-107258

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6...

CVE-2026-107257

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-107255

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1...

CVE-2026-107251

Incorrect Authorization vulnerability in Drupal Entity Reference Manager Merge entities allows Forceful Browsing. This issue affects Entity Reference Manager Merge entities versions: from 0.0.0 to 1.0.3...

EUVD-2026-113581

Incorrect Authorization vulnerability in Drupal Entity Reference Manager Merge entities allows Forceful Browsing. This issue affects Entity Reference Manager Merge entities versions: from 0.0.0 to 1.0.3...

CVE-2026-107251

The Entity Reference Manager (Merge entities) module for Drupal is affected by an Incorrect Authorization vulnerability (CWE-863). This flaw occurs because the module fails to sufficiently restrict access to all entity management operations. Consequently, users with content viewing permissions ca...

CVE-2026-107251 Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194

Incorrect Authorization vulnerability in Drupal Entity Reference Manager Merge entities allows Forceful Browsing. This issue affects Entity Reference Manager Merge entities versions: from 0.0.0 to 1.0.3...

CVE-2026-107251 Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194

Incorrect Authorization vulnerability in Drupal Entity Reference Manager Merge entities allows Forceful Browsing. This issue affects Entity Reference Manager Merge entities versions: from 0.0.0 to 1.0.3...

CVE-2026-107257

A critical Incorrect Authorization vulnerability exists in the Drupal Actstream module, specifically affecting versions 0.0.0 to 2.0.1 and 2.1.0 to 2.1.1 . The root cause is a failure in the configuration route , which does not sufficiently verify that the user editing the configuration is the ac...

CVE-2026-107257 Actstream - Critical - Access bypass - SA-CONTRIB-2026-198

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

EUVD-2026-113577

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-107257 Actstream - Critical - Access bypass - SA-CONTRIB-2026-198

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-107258 Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6...

CVE-2026-107258

The Drupal Inline Entity Form Dialog module (versions 0.0.0 to 1.0.6) contains an Incorrect Authorization vulnerability (CWE-863) that allows Forceful Browsing . The root cause is that the module relies solely on the "access administration pages" permission and fails to verify if the current user...

EUVD-2026-113576

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6...

CVE-2026-107258 Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6...

CVE-2026-107263 Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7...