CVE-2026-84914
CVE-2026-84914 · Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
calculate working days
- Versions
- ≥ 0.0.0, < 2.0.3: Affected (semver)
Update to 2.0.3
drupal/calculate_working_days Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.0.3
Update to 2.0.3