← All advisories

Critical severity9.8NVD Advisory· Published May 19, 2026· Updated May 27, 2026

CVE-2026-8495

CVE-2026-8495

Description

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.

This issue affects Date iCal: from 0.0.0 before 4.0.15.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Date Icalinferred2 versions
>=0.0.0,<4.0.15+ 1 more
- (no CPE)range: >=0.0.0,<4.0.15
- (no CPE)range: <4.0.15
Package: https://wordpress.org/plugins/date-ical
Date Ical Project/Date Ical
cpe:2.3:a:date_ical_project:date_ical:*:*:*:*:*:drupal:*:*
Range: <4.0.15

Patches

Vulnerability mechanics

References

1

www.drupal.org/sa-contrib-2026-037nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.