CVE-2026-18259

CVE-2026-18259 is an Observable Timing Discrepancy vulnerability in the Drupal Token Content Access contrib module (versions 0.0.0 through 3.1.2 ). The module, which allows site administrators to grant content access via tokens, does not sufficiently protect the access token comparison in some ca...

Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

The Token Content Access module enables site administrators to provide access to content using access tokens. The module does not sufficiently protect access token comparison in some cases. This could allow a persistent attacker to use a timing attack to guess a valid access token and bypass acce...

PT-2026-66339

Name of the Vulnerable Software and Affected Versions Token Content Access versions 0.0.0 through 3.1.2 Description An observable timing discrepancy exists in the Token Content Access module, which allows site administrators to grant content access via access tokens. The module fails to...