CVE-2026-81165

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

EUVD-2026-70007

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

CVE-2026-81165 Blazy - Less critical - Access bypass - SA-CONTRIB-2026-104

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

CVE-2026-81165

Drupal Blazy (a Drupal contrib module) has an incorrect authorization vulnerability that allows forceful browsing . The module's Filter plugin shortcode does not consistently check entity view access, enabling a user with access to a Blazy-enabled text format to render a field from an entity they...