CVE-2026-3527
CVE-2026-3527 · AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.
CVSS 6.5 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
ajax dashboard
- Versions
- ≥ 0.0.0, < 3.1.0: Affected (semver)
Update to 3.1.0
drupal/ajax_dashboard Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.1.0
Update to 3.1.0