Lucene search
+L

10 matches found

NVD
NVD
•added 2026/09/02 1:18 p.m.•18 views

CVE-2026-81164

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

5.4CVSS0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 12:31 p.m.•43 views

CVE-2026-81164 Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

0.0023EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 12:31 p.m.•23 views

CVE-2026-81164 Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

5.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 12:31 p.m.•15 views

EUVD-2026-69999

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 12:31 p.m.•47 views

CVE-2026-81164

The Entity PDF module for Drupal (versions 0.0.0 through 2.1.5 ) contains a Missing Authorization vulnerability that facilitates Forceful Browsing . The root cause is that the module fails to verify entity view access when fetching a PDF route. This oversight allows an unauthorized user to access...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/09/02 12:31 p.m.•12 views

CVE-2026-81164 Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

5.4CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•8 views

CVE-2026-81164: Missing Authorization

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/26 5:42 p.m.•16 views

DRUPAL-CONTRIB-2026-114

The Entity PDF module can create a PDF from any entity based on any View mode. This module does not check entity view access when fetching a PDF route. This could result in a user accessing a PDF of an entity that they should not be able to view...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•28 views

PT-2026-82367

Name of the Vulnerable Software and Affected Versions Entity PDF versions 0.0.0 through 2.1.5 Description Missing authorization in the Entity PDF module allows forceful browsing. The module fails to check entity view access when fetching a PDF route, which may allow a user to access a PDF of an...

5.8AI score0.0023EPSS
SaveExploits0References3
Drupal
Drupal
•added 2026/08/26 12:00 a.m.•23 views

Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114

The Entity PDF module can create a PDF from any entity based on any View mode. This module does not check entity view access when fetching a PDF route. This could result in a user accessing a PDF of an entity that they should not be able to view...

5.4CVSS5.8AI score0.0023EPSS
SaveExploits0References2
Rows per page
Query Builder