Vulnerabilities

CVSS

4.2 Medium

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Risk score

33.6

Published

2026-08-25

Status

Published

Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.

Weaknesses

CWE-862

Coverage 1

vulnerability

Multiples vulnérabilités dans Drupal (16 juillet 2026)

Multiple vulnerabilities have been discovered in Drupal, allowing attackers to compromise data confidentiality and inject malicious code remotely. These vulnerabilities affect older versions of the CMS, requiring immedia…

CERT-FR · Jul 16, 2026 Medium

CVE-2026-15916CVE-2026-15917CVE-2026-55805drupalvulnerabilitycve

All articles mentioning it

Advisories and references

• drupal.org/sa-core-2026-010