Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-3527 DRUPAL-CONTRIB-2026-022EUVD-2026-16379

AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022

Published Mar 26, 2026 · Updated Mar 27, 2026 · Assigned by drupal

Description

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.

Affected products

VendorProductAffectedFixed
Drupal AJAX Dashboard 0.0.0 – < 3.1.0 3.1.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ajax_dashboard < 3.1.0 3.1.0 DRUPAL-CONTRIB-2026-022

Advisories 1

References