Description
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.
Published:
2026-10-22
Score:
n/a
EPSS:
n/a
KEV:
No
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://www.drupal.org/sa-contrib-2026-126 |
|
History
Thu, 22 Oct 2026 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0. | |
| Title | Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126 | |
| Weaknesses | CWE-862 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: drupal
Published:
Updated: 2026-10-22T01:22:11.876Z
Reserved: 2026-09-02T15:44:19.097Z
Link: CVE-2026-84916
No data.
Status : Received
Published: 2026-10-22T02:17:02.070
Modified: 2026-10-22T02:17:02.070
Link: CVE-2026-84916
No data.
OpenCVE Enrichment
No data.
Weaknesses