DRUPAL-CONTRIB-2026-231: Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231

Q: Who can exploit this issue?

The vulnerability has no authentication or user-interaction requirement (PR:N and UI:N) and is reachable over the network (AV:N). An unauthenticated remote attacker can exploit it.

Q: Which versions are affected?

Ágora Transparency Theme versions from 0.0.0 through 1.2.3 are affected.

Q: What is the likely impact?

The issue is an information disclosure caused by missing authorization and forceful browsing. The supplied metrics indicate low confidentiality impact, with no integrity or availability impact.

Published Oct 30, 2026

Updated

Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3.

Affected Software

1 affected component

Drupal Ágora Transparency Theme>=0.0.0<=1.2.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SA-CONTRIB-2026-231

Event History

Oct 30, 2026

CVE Published

via OSV·03:09 AM

Data Sourced

via OSV·03:09 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability has no authentication or user-interaction requirement (PR:N and UI:N) and is reachable over the network (AV:N). An unauthenticated remote attacker can exploit it.

Which versions are affected?

Ágora Transparency Theme versions from 0.0.0 through 1.2.3 are affected.

What is the likely impact?

The issue is an information disclosure caused by missing authorization and forceful browsing. The supplied metrics indicate low confidentiality impact, with no integrity or availability impact.

DRUPAL-CONTRIB-2026-231: Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected?

What is the likely impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected?

What is the likely impact?