CVE-2026-8495

The Drupal Date iCal module (versions 0.0.0 through 4.0.14 ) is vulnerable to a Missing Authorization flaw allowing Forceful Browsing . The root cause is the module's failure to sufficiently check entity or field access and its lack of user input sanitization during the generation of iCal feeds. ...