CVE-2026-107311: Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

Published Oct 30, 2026

Updated

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41.

Event History

Oct 30, 2026

CVE Published

via MITRE·03:10 AM

Data Sourced

via MITRE·03:10 AM

DescriptionWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Drupal sites using Permissions by Term versions from 0.0.0 through 3.1.41 are affected.

Does exploitation require an authenticated account or user interaction?

No. The vector indicates network-reachable exploitation with no privileges or user interaction required, although exploitation has high attack complexity.

What is the potential impact?

The reported impact is limited information disclosure. No integrity or availability impact is indicated.

CVE-2026-107311: Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require an authenticated account or user interaction?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require an authenticated account or user interaction?

What is the potential impact?