Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-96386 DRUPAL-CONTRIB-2026-190EUVD-2026-107811GHSA-66qr-r933-j98q

Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190

Published Oct 22, 2026 · Updated Nov 3, 2026 · Assigned by drupal

Vendor: Drupal Product: Smart Content Package: drupal/smart_content Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1.

Affected products

VendorProductAffectedFixed
Drupal Smart Content 0.0.0 – < 3.2.1 3.2.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/smart_content < 3.2.1 3.2.1 DRUPAL-CONTRIB-2026-190

Advisories 1

References