CVE-2026-107307 SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3...

EUVD-2026-113563

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11...

CVE-2026-107309 Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11...

CVE-2026-107309

The Drupal Easy Breadcrumb module (versions 0.0.0 to 2.0.11 ) is vulnerable to a Missing Authorization vulnerability leading to Forceful Browsing . The root cause is that the module fails to sufficiently verify view access for parent terms before rendering crumb segments. This could allow unautho...

CVE-2026-107309 Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11...

CVE-2026-107311 Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41...

CVE-2026-107311

The Permissions by Term module for Drupal (versions 0.0.0 to 3.1.41) is vulnerable to Forceful Browsing due to an Improper Check for Unusual or Exceptional Conditions (CWE-754). The root cause is that the module fails to sufficiently verify access rights when operating in "Permission mode" if a n...

EUVD-2026-113561

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41...

CVE-2026-107311 Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41...

CVE-2026-107255 Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1...

EUVD-2026-113559

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1...

CVE-2026-107255

The Restrict route by IP module for Drupal is vulnerable to an Incorrect Authorization vulnerability, leading to an access bypass . The module fails to reliably restrict a subset of dynamic routes , which can enable Forceful Browsing . This issue affects versions 0.0.0 to 1.3.1 and 2.0.0 to 2.0.1...

EUVD-2026-113545

Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to 1.0.7...

CVE-2026-114530

The Dopup module for Drupal (versions 0.0.0 to 1.0.7 ) is vulnerable to Incorrect Authorization (CWE-863). Due to insufficient entity access checking, the module may expose the titles of private Webforms . This flaw allows for Forceful Browsing , potentially leading to information disclosure. No ...

CVE-2026-114533

The Drupal Ágora Transparency Theme (versions 0.0.0 to 1.2.3 ) contains a missing authorization vulnerability (CWE-862 ) that allows forceful browsing and information disclosure. The theme fails to sufficiently check file access when rendering a table preview of attached CSV files , reading the f...

EUVD-2026-113541

Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3...

CVE-2026-114533 Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231

Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3...

CVE-2026-114535

The Drupal Swiper formatter module is vulnerable to Missing Authorization (CWE-862), which can lead to Forceful Browsing . The issue arises because a route used for displaying published content entities in a dialog does not sufficiently verify if the current user has access to the specific entity...

EUVD-2026-113539

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...

CVE-2026-114535 Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0...