Missing Authorization Vulnerability in Drupal Advanced Search
CVE-2026-84910

Currently unrated

Key Information:

Vendor

Drupal
Status
Advanced Search
Vendor
CVE Published:
22 October 2026

What is CVE-2026-84910?

A missing authorization vulnerability in the Drupal Advanced Search module permits forceful browsing, enabling unauthorized users to access restricted information. This issue impacts versions ranging from 0.0.0 to 2.4.5, necessitating immediate attention to safeguard sensitive data.

Affected Version(s)

Advanced Search 0.0.0 < 2.4.5

References

https://www.drupal.org/sa-contrib-2026-118

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Annie Oelschlager (annieoelschlager)
Joe Corall (joecorall)
Marcus Johansson (marcus_johansson)
Swan Kalata (akalata)
Neil Drumm (drumm)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.