CVE-2026-8491

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1...

CVE-2026-4933

In Drupal, Unpublished Node Permissions had an Incorrect Authorization vulnerability that enables Forceful Browsing in unpublished content. Affected component: Unpublished Node Permissions; versions from 0.0.0 up to, but not including, 1.7.0. Root cause is unauthorized access to unpublished nodes...