CVE-2026-107307

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3...

CVE-2026-107307

Drupal SmartLinker AI (versions 0.0.0 to 1.0.3) is vulnerable to an Incorrect Authorization issue (CWE-863) that enables Forceful Browsing . The root cause is that the module's search query, used by the "Generate internal links" action in the AI CKEditor toolbar, fails to respect entity access wh...

CVE-2026-107307 SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3...

EUVD-2026-113565

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3...