← All advisories

Critical severity9.8NVD Advisory· Published May 19, 2026· Updated Jul 23, 2026

CVE-2026-8495

CVE-2026-8495

Description

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.

This issue affects Date iCal: from 0.0.0 before 4.0.15.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Date Icalinferred
Range: >=0.0.0,<4.0.15
Package: https://wordpress.org/plugins/date-ical
Date Ical Project/Date Ical
cpe:2.3:a:date_ical_project:date_ical:*:*:*:*:*:drupal:*:*
Range: <4.0.15
Drupal/Date iCalllm-create
Range: <4.0.15

Patches

Vulnerability mechanics

References

1

www.drupal.org/sa-contrib-2026-037nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.