Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-84916 DRUPAL-CONTRIB-2026-126EUVD-2026-107873GHSA-3whq-72m9-mmx3

Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Vendor: Drupal Product: Islandora Package: drupal/islandora Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.

Affected products

VendorProductAffectedFixed
Drupal Islandora 0.0.0 – < 2.19.0 2.19.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/islandora < 2.19.0 2.19.0 DRUPAL-CONTRIB-2026-126

Advisories 1

References