Incorrect Authorization Vulnerability in Actstream by Drupal

CVE-2026-107257

What is CVE-2026-107257?

The Actstream component of Drupal is susceptible to an incorrect authorization vulnerability, enabling potential attackers to perform forceful browsing. This security flaw allows unauthorized users to access restricted areas of the application, leading to the exposure of sensitive data and disruption of services. Affected versions include Actstream 0.0.0, 2.0.1, 2.1.0, and 2.1.1, highlighting the critical need for users to review their configurations and implement available security patches.

References