CVE-2026-84910: Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118

Q: Which versions need to be reviewed?

Advanced Search versions from 0.0.0 through 2.4.5 are affected.

Q: What type of attacker activity does this issue allow?

The vulnerability is an access bypass caused by missing authorization and allows forceful browsing.

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.

Affected Software

1 affected component

Drupal Advanced Search>=0.0.0<=2.4.5

Event History

Oct 22, 2026

CVE Published

via MITRE·01:22 AM

Data Sourced

via MITRE·01:22 AM

DescriptionWeakness

Frequently Asked Questions

Which versions need to be reviewed?

Advanced Search versions from 0.0.0 through 2.4.5 are affected.

What type of attacker activity does this issue allow?

The vulnerability is an access bypass caused by missing authorization and allows forceful browsing.

CVE-2026-84910: Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118

Affected Software

Event History

Frequently Asked Questions

Which versions need to be reviewed?

What type of attacker activity does this issue allow?

Company

Resources

Contact

Frequently Asked Questions

Which versions need to be reviewed?

What type of attacker activity does this issue allow?