Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-87954 DRUPAL-CONTRIB-2026-152EUVD-2026-107847GHSA-78cv-cmcx-cx8m

Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.

Affected products

VendorProductAffectedFixed
Drupal Taxonomy Term Glossary 0.0.0 – < 4.6.0 4.6.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/term_glossary < 4.6.0 4.6.0 DRUPAL-CONTRIB-2026-152

Advisories 1

References