CVE-2026-81164
CVE-2026-81164 · Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.
CVSS 5.4 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
entity pdf
- Versions
- ≥ 0.0.0, < 2.1.5: Affected (semver)
Update to 2.1.5
drupal/entity_pdf Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.1.5
Update to 2.1.5