Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-114545 DRUPAL-CONTRIB-2026-244EUVD-2026-113528GHSA-vq2c-9mg3-jpfj

Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalendar View versions: from 0.0.0 to 5.2.6.

Affected products

VendorProductAffectedFixed
Drupal Fullcalendar View 0.0.0 – < 5.2.6 5.2.6

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/fullcalendar_view < 5.2.6 5.2.6 DRUPAL-CONTRIB-2026-244

Advisories 1

References