Missing Authorization Vulnerability in Calculate Working Days Plugin by Drupal
CVE-2026-84914

Currently unrated

Key Information:

Vendor

Drupal
Status
Calculate Working Days
Vendor
CVE Published:
22 October 2026

What is CVE-2026-84914?

A missing authorization vulnerability in the Calculate Working Days plugin allows unauthorized users to access sensitive functionalities through forceful browsing. This affects versions from 0.0.0 to 2.0.3, potentially compromising the security of affected Drupal sites. Site administrators are urged to upgrade to the latest secured version to mitigate risks.

Affected Version(s)

Calculate Working Days 0.0.0 < 2.0.3

References

https://www.drupal.org/sa-contrib-2026-122

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Vivek kumar (vivek_lnwebworks)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.