CVE-2026-81165

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

CVE-2026-81165 Blazy - Less critical - Access bypass - SA-CONTRIB-2026-104

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

CVE-2026-81165 Blazy - Less critical - Access bypass - SA-CONTRIB-2026-104

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

EUVD-2026-70007

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18...

CVE-2026-81165

CVE-2026-81165 is an Incorrect Authorization (Access Bypass) vulnerability in the Drupal Blazy module, affecting versions 0.0.0 through 3.0.18 . Blazy enables users to display a field of a target entity through a filter plugin shortcode. The module does not consistently check entity view access, ...