CVE-2026-96386

The Smart Content module for Drupal is vulnerable to an access bypass issue due to missing authorization checks. The Smart Content Block submodule fails to sufficiently verify block access when rendering blocks through a "Display Blocks" reaction via the module's AJAX endpoint . This flaw allows ...

EUVD-2026-107811

Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1...