Unrated severityNVD Advisory· Published Aug 25, 2026
CVE-2026-15916
CVE-2026-15916
Description
Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Package: https://wordpress.org/plugins/drupal
- Range: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*
Patches
Vulnerability mechanics
References
1News mentions
1- Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010Drupal Security Advisories · Jul 15, 2026