CVE-2026-84914: Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3.

Event History

Oct 22, 2026

CVE Published

via MITRE·01:22 AM

Data Sourced

via MITRE·01:22 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Drupal Calculate Working Days installations running versions from 0.0.0 through 2.0.3 are affected.

What access does an attacker need to exploit this issue?

The issue is described as forceful browsing caused by missing authorization. The provided information does not specify whether authentication or any particular privilege level is required.

CVE-2026-84914: Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Event History

Frequently Asked Questions

Which installations are affected?

What access does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What access does an attacker need to exploit this issue?