DRUPAL-CONTRIB-2026-205: Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205
Published Oct 30, 2026
·Updated
Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.
Affected Software
1 affected component
Drupal Views Share>=0.0.0<=2.0.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Drupal Views Shareto a version that resolves this vulnerability.Patch SA-CONTRIB-2026-205
Event History
Oct 30, 2026
CVE Published
via OSV·03:10 AM
Data Sourced
via OSV·03:10 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions are affected?
Views Share versions from 0.0.0 through 2.0.1 are affected.
2
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.
3
What is the expected impact?
The issue permits forceful browsing due to missing authorization. The supplied vector indicates no confidentiality or integrity impact and a low availability impact.