Missing Authorization Flaw in Drupal Ágora Transparency Theme
CVE-2026-114533

Currently unrated

Key Information:

Vendor

Drupal

Vendor
CVE Published:
30 October 2026

What is CVE-2026-114533?

The Drupal Ágora Transparency Theme is affected by a missing authorization vulnerability that allows unauthorized users to perform forceful browsing. This issue spans versions 0.0.0 through 1.2.3, and could potentially expose sensitive data or functionalities that should be restricted. Users of this theme are advised to review their security configurations and apply necessary updates to mitigate this risk.

Affected Version(s)

Ágora Transparency Theme 0.0.0 < 1.2.3

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrés Moreno Rubio (andresmoreno28)
Andrés Moreno Rubio (andresmoreno28)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.