Missing Authorization Vulnerability in Drupal Digital Signage Framework
CVE-2026-81166

Currently unrated

Key Information:

Vendor: Drupal
Status: Digital Signage Framework
Vendor: CVE Published:; 2 September 2026

What is CVE-2026-81166?

A missing authorization vulnerability in the Drupal Digital Signage Framework can be exploited to perform forceful browsing. This allows unauthorized users to access sensitive data or functionalities that should be restricted. This issue impacts all versions from 0.0.0 to 2.6.1, highlighting the importance of proper security measures to protect against unauthorized access.

Affected Version(s)

Digital Signage Framework 0.0.0 < 2.6.1

References

https://www.drupal.org/sa-contrib-2026-109

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 2, 2026
Vulnerability Reserved
Aug 26, 2026

Credit

Marcus Johansson (marcus_johansson)

Daniel Speicher (danielspeicher)

JÃ¼rgen Haas (jurgenhaas)

Swan Kalata (akalata)

Greg Knaddison (greggles)

Jess (xjm)

CVE-2026-81166 Data

JSON