🔐 CVE Alert

CVE-2026-114537

UNKNOWN 0.0

View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0.

CWE CWE-863
Vendor drupal
Product view unpublished
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal view unpublished

Be the first to know when new unknown vulnerabilities affecting drupal view unpublished are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / View Unpublished
0.0.0 < 1.5.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-235

Credits

Andrew L (andrew_l) Tobias Bähr (tobiasb) Oleksandr Kuzava (nginex) Gonçalo Mateus (lolgm) Tobias Bähr (tobiasb) Swan Kalata (akalata) Juraj Nemec (poker10)