CVE-2026-81166
CVE-2026-81166 · Digital Signage Framework - Moderately critical - Access bypass - SA-CONTRIB-2026-109
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
digital signage framework
- Versions
- ≥ 0.0.0, < 2.6.1: Affected (semver)
Update to 2.6.1
drupal/digital_signage_framework Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.6.1
Update to 2.6.1