Improper Condition Check in Drupal Permissions by Term Affects Security
CVE-2026-107311

Currently unrated

Key Information:

Vendor

Drupal

Vendor
CVE Published:
30 October 2026

What is CVE-2026-107311?

An improper check for unusual or exceptional conditions in the Permissions by Term module of Drupal can lead to forceful browsing. This vulnerability allows attackers to exploit insufficient access controls, potentially granting unauthorized access to restricted content based on user roles. Affected versions range from 0.0.0 to 3.1.41, highlighting the importance of updating to mitigate any related security risks.

Affected Version(s)

Permissions by Term 0.0.0 < 3.1.41

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ayrmax
Peter Majmesku (jepster_)
Marc-Oliver Teschke (marcoliver)
Swan Kalata (akalata)
Damien McKenna (damienmckenna)
Juraj Nemec (poker10)
Pierre Rudloff (prudloff)
.