CVE-2026-8491CWE-754

Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034

Low · published May 19, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.

This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.6th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-05-19T22:28Z
EPSS history
Timeline
  • 19 MAY 22:28Z
    Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034
    cvelistv5