715248 matches found
CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...
CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...
CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...
CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...
CVE-2026-84912
The Drupal AI module is affected by a Missing Authorization vulnerability (CWE-862) in the AI Translate submodule. The root cause is insufficient access checks on entities, related fields, or referenced entities during the AI translation process, particularly when these components have different ...
CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...
CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...
CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...
CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...
CVE-2026-84914
The Calculate Working Days Drupal module (versions 0.0.0 to 2.0.3 ) is vulnerable to a Missing Authorization flaw (CWE-862 ). The module fails to sufficiently restrict access to its settings form , which allows for Forceful Browsing . An attacker could potentially access and modify configuration ...
CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...
CVE-2026-84917
The Jsonapi Role Access module for Drupal (versions 0.0.0 through 2.0.2 ) is vulnerable to an incorrect authorization issue. The module fails to sufficiently enforce access controls when a request mimics an XMLHttpRequest , which can allow Forceful Browsing by bypassing intended role-based restri...
CVE-2026-84917 Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
CVE-2026-84917 Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
CVE-2026-84916 Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0...
CVE-2026-84916
The Islandora software (versions 0.0.0 through 2.19.0) contains a Missing Authorization vulnerability in the islandora_advanced_search submodule. The issue stems from a failure to sufficiently verify block access when arbitrary block IDs are submitted to a publicly accessible AJAX endpoint . This...
EUVD-2026-107872
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
CVE-2026-84917
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
CVE-2026-84917 Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...