Missing Authorization Vulnerability in Drupal Views Share Product by Drupal
CVE-2026-107266

Currently unrated

Key Information:

Vendor

Drupal
Status
Views Share
Vendor
CVE Published:
30 October 2026

What is CVE-2026-107266?

A Missing Authorization vulnerability in the Drupal Views Share extension permits unauthorized users to access content through forceful browsing. This issue primarily affects versions from 0.0.0 to 2.0.1, highlighting a critical oversight in access control mechanisms, which could result in unintended exposure of sensitive data.

Affected Version(s)

Views Share 0.0.0 < 2.0.1

References

https://www.drupal.org/sa-contrib-2026-205

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hemant Gupta (guptahemant)
Daniel Cothran (andileco)
Hemant Gupta (guptahemant)
Swan Kalata (akalata)
Juraj Nemec (poker10)
.