CVE-2026-84916: Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126

Islandora versions from 0.0.0 through 2.19.0 are affected.

The issue is described as a missing authorization flaw that allows forceful browsing. No additional attacker prerequisites are provided.

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.

Affected Software

1 affected component

Islandora Islandora>=0.0.0<=2.19.0

Oct 22, 2026

CVE Published

via MITRE·01:22 AM

Data Sourced

via MITRE·01:22 AM

DescriptionWeakness

Islandora versions from 0.0.0 through 2.19.0 are affected.

The issue is described as a missing authorization flaw that allows forceful browsing. No additional attacker prerequisites are provided.