CVE-2026-96386: Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1.

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which Smart Content versions are affected?

Smart Content versions from 0.0.0 through 3.2.1 are affected.

What type of access is required to exploit this issue?

The issue is described as missing authorization that allows forceful browsing. The available information does not specify whether authentication or any particular user role is required.

CVE-2026-96386: Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190

Event History

Frequently Asked Questions

Which Smart Content versions are affected?

What type of access is required to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which Smart Content versions are affected?

What type of access is required to exploit this issue?