CVE-2026-87954: Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments are affected?

Drupal sites using Taxonomy Term Glossary versions from 0.0.0 through 4.6.0 are affected.

What access does an attacker need to exploit this issue?

The issue is described as forceful browsing caused by missing authorization, indicating exploitation involves directly requesting functionality or resources without the required authorization.

CVE-2026-87954: Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?