PT-2026-28676 · Drupal · Drupal

Andre Groendijk + 4 · Publicado 2026-03-11 · Atualizado 2026-03-26 · CVE-2026-4933

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 1.7.0

Description An incorrect authorization issue exists in Drupal’s Unpublished Node Permissions, allowing forceful browsing. The problem relates to inconsistent access control for unpublished translated nodes. The module, designed to manage permissions for unpublished nodes per content type, does not consistently enforce these controls.

Recommendations Update to version 1.7.0 or later.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-4933

DRUPAL-CONTRIB-2026-029

Produtos afetados

Drupal

Referências · 4

• https://twitter.com/CVEnew/status/2037280541452755001 · Publicação no Twitter
• https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-029 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-4933 · Nota de Segurança
• https://drupal.org/sa-contrib-2026-029 · Aviso do Fabricante