4267 matches found
EUVD-2026-107878
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...
CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...
CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...
EUVD-2026-107877
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...
CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...
CVE-2026-84914
The Calculate Working Days Drupal module (versions 0.0.0 to 2.0.3 ) is vulnerable to a Missing Authorization flaw (CWE-862 ). The module fails to sufficiently restrict access to its settings form , which allows for Forceful Browsing . An attacker could potentially access and modify configuration ...
CVE-2026-84916 Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0...
CVE-2026-84917
The Jsonapi Role Access module for Drupal (versions 0.0.0 through 2.0.2 ) is vulnerable to an incorrect authorization issue. The module fails to sufficiently enforce access controls when a request mimics an XMLHttpRequest , which can allow Forceful Browsing by bypassing intended role-based restri...
CVE-2026-84916 Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0...
CVE-2026-84916
The Islandora software (versions 0.0.0 through 2.19.0) contains a Missing Authorization vulnerability in the islandora_advanced_search submodule. The issue stems from a failure to sufficiently verify block access when arbitrary block IDs are submitted to a publicly accessible AJAX endpoint . This...
EUVD-2026-107873
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0...
CVE-2026-84917 Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
EUVD-2026-107872
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
CVE-2026-84917 Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2...
CVE-2026-84921
The Webform Submissions Delete module for Drupal, affecting versions 0.0.0 through 1.2.0 , contains a Missing Authorization vulnerability. The root cause is that the module does not sufficiently restrict access to the delete form, allowing for Forceful Browsing . An unauthorized user can exploit ...
EUVD-2026-107866
Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0...
CVE-2026-84921 Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133
Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0...
CVE-2026-84920
The Unpublished Node Permissions module for Drupal (versions 0.0.0 through 1.8.0) contains an incorrect authorization vulnerability that enables forceful browsing . The root cause is that the module incorrectly grants view access for published content, which overrides other existing access mechan...
CVE-2026-84920 Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132
Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0...