CVE-2026-96386
CVE-2026-96386 · Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1.
CVSS 6.5 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
smart content
- Versions
- ≥ 0.0.0, < 3.2.1: Affected (semver)
Update to 3.2.1
drupal/smart_content Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.2.1
Update to 3.2.1