Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-132 (CVE-2026-84920)

    Vulnerability from drupal – Published: 2026-09-02 16:38 – Updated: 2026-09-02 16:38 – Source website
    VLAI
    Details

    This module creates permissions per node content type to control access to unpublished content.

    The module has allowed view access for published content, overriding other access mechanisms that might have been in place.


    {
      "affected": [
        {
          "database_specific": {
            "affected_versions": "\u003c1.8.0"
          },
          "package": {
            "ecosystem": "Packagist:https://packages.drupal.org/8",
            "name": "drupal/unpublished_node_permissions"
          },
          "ranges": [
            {
              "database_specific": {
                "constraint": "\u003c1.8.0"
              },
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1.8.0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "severity": []
        }
      ],
      "aliases": [
        "CVE-2026-84920"
      ],
      "credits": [
        {
          "contact": [
            "https://www.drupal.org/u/eeg"
          ],
          "name": "Erwin Eggenberger (eeg)"
        },
        {
          "contact": [
            "https://www.drupal.org/u/joncjordan"
          ],
          "name": "Jon Jordan (joncjordan)"
        }
      ],
      "details": "This module creates permissions per node content type to control access to unpublished content.\n\nThe module has allowed view access for published content, overriding other access mechanisms that might have been in place.",
      "id": "DRUPAL-CONTRIB-2026-132",
      "modified": "2026-09-02T16:38:32.000Z",
      "published": "2026-09-02T16:38:32.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://www.drupal.org/sa-contrib-2026-132"
        }
      ],
      "schema_version": "1.7.0"
    }