🔐 CVE Alert

CVE-2026-87954

UNKNOWN 0.0

Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.

CWE CWE-862
Vendor drupal
Product taxonomy term glossary
Ecosystems
Industries
WebMedia
Published Oct 22, 2026
Stay Ahead of the Next One

Get instant alerts for drupal taxonomy term glossary

Be the first to know when new unknown vulnerabilities affecting drupal taxonomy term glossary are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Taxonomy Term Glossary
0.0.0 < 4.6.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-152

Credits

Hemant Gupta (guptahemant) Marcus Johansson (marcus_johansson) Serhii Checheniev (serhii-che) Frank Mably (mably) Greg Knaddison (greggles) Juraj Nemec (poker10) Jess (xjm) Swan Kalata (akalata)