Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Drupal | Permissions by Term | affected |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.drupal.org/sa-contrib-2026-214 |
|
Fri, 30 Oct 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41. | |
| Title | Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214 | |
| Weaknesses | CWE-754 | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: drupal
Published:
Updated: 2026-10-30T03:10:00.554Z
Reserved: 2026-10-07T16:30:25.712Z
Link: CVE-2026-107311
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-30T04:17:58.963
Modified: 2026-10-30T04:17:58.963
Link: CVE-2026-107311
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-30T04:30:07Z