CVE-2026-8491
CVE-2026-8491 · Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.
CVSS 3.7 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
node view permissions
- Versions
- ≥ 0.0.0, < 1.7.0: Affected (semver)
- ≥ 2.0.0, < 2.0.1: Affected (semver)
Update to 1.7.0; Update to 2.0.1
drupal/node_view_permissions Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.7.0
- ECOSYSTEM: ≥ 2.0.0, < 2.0.1
Update to 1.7.0; Update to 2.0.1