🔐 CVE Alert

CVE-2026-84917

UNKNOWN 0.0

Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.

CWE CWE-863
Vendor drupal
Product jsonapi role access
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal jsonapi role access

Be the first to know when new unknown vulnerabilities affecting drupal jsonapi role access are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Jsonapi Role Access
0.0.0 < 2.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-127

Credits

Drew Webber (mcdruid) Julian Pustkuchen (anybody) Joshua Sedler (grevil) Damien McKenna (damienmckenna) Greg Knaddison (greggles) Juraj Nemec (poker10)