Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-81164 DRUPAL-CONTRIB-2026-114EUVD-2026-69999GHSA-x6xg-8845-hcjr

Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by drupal

Vendor: Drupal Product: Entity PDF Package: drupal/entity_pdf Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.

Affected products

VendorProductAffectedFixed
Drupal Entity PDF 0.0.0 – < 2.1.5 2.1.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/entity_pdf < 2.1.5 2.1.5 DRUPAL-CONTRIB-2026-114

Advisories 1

References