๐Ÿ” CVE Alert

CVE-2026-84910

UNKNOWN 0.0

Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.

CWE CWE-862
Vendor drupal
Product advanced search
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal advanced search

Be the first to know when new unknown vulnerabilities affecting drupal advanced search are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Drupal / Advanced Search
0.0.0 < 2.4.5

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
drupal.org: https://www.drupal.org/sa-contrib-2026-118

Credits

Marcus Johansson (marcus_johansson) Annie Oelschlager (annieoelschlager) Joe Corall (joecorall) Marcus Johansson (marcus_johansson) Swan Kalata (akalata) Neil Drumm (drumm) Greg Knaddison (greggles) Juraj Nemec (poker10)