Medium severity5.3NVD Advisory· Published Sep 2, 2026· Updated Sep 16, 2026
CVE-2026-81165
CVE-2026-81165
Description
Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-104nvdVendor Advisory
News mentions
1- Drupal: 25 Vulnerabilities Disclosed Together on September 2, 2026Vypr Intelligence · Sep 2, 2026