Search
Find a vulnerability
Search criteria
Related vulnerabilities
DRUPAL-CONTRIB-2026-132 (CVE-2026-84920)
Vulnerability from drupal – Published: 2026-09-02 16:38 – Updated: 2026-09-02 16:38 – Source website
VLAI
Details
This module creates permissions per node content type to control access to unpublished content.
The module has allowed view access for published content, overriding other access mechanisms that might have been in place.
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"database_specific": {
"affected_versions": "\u003c1.8.0"
},
"package": {
"ecosystem": "Packagist:https://packages.drupal.org/8",
"name": "drupal/unpublished_node_permissions"
},
"ranges": [
{
"database_specific": {
"constraint": "\u003c1.8.0"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "1.8.0"
}
],
"type": "ECOSYSTEM"
}
],
"severity": []
}
],
"aliases": [
"CVE-2026-84920"
],
"credits": [
{
"contact": [
"https://www.drupal.org/u/eeg"
],
"name": "Erwin Eggenberger (eeg)"
},
{
"contact": [
"https://www.drupal.org/u/joncjordan"
],
"name": "Jon Jordan (joncjordan)"
}
],
"details": "This module creates permissions per node content type to control access to unpublished content.\n\nThe module has allowed view access for published content, overriding other access mechanisms that might have been in place.",
"id": "DRUPAL-CONTRIB-2026-132",
"modified": "2026-09-02T16:38:32.000Z",
"published": "2026-09-02T16:38:32.000Z",
"references": [
{
"type": "WEB",
"url": "https://www.drupal.org/sa-contrib-2026-132"
}
],
"schema_version": "1.7.0"
}