Missing Authorization Vulnerability in Islandora by Drupal
CVE-2026-84916

Currently unrated

Key Information:

Vendor

Drupal
Status
Islandora
Vendor
CVE Published:
22 October 2026

What is CVE-2026-84916?

A vulnerability in Islandora, a digital asset management system provided by Drupal, allows unauthorized users to access restricted content through forceful browsing. This issue affects all versions from 0.0.0 to 2.19.0, necessitating immediate attention to prevent potential data exposure.

Affected Version(s)

Islandora 0.0.0 < 2.19.0

References

https://www.drupal.org/sa-contrib-2026-126

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joe Corall (joecorall)
Annie Oelschlager (annieoelschlager)
Joe Corall (joecorall)
Swan Kalata (akalata)
Bram Driesen (bramdriesen)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.