Live › vulnerability › CVE-2026-107266
Drupal Views Share lacks an authorization check, so a user can reach pages by direct URL that they should not see. The sources do not say what data those pages expose.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Drupal sites that run the Views Share module, versions from 0.0.0 to 2.0.1 per the NVD entry, are affected. Sites without this module can skip it. The sources do not say which access checks are missing or which data is exposed.
No product ranges from the sources yet.
views_share module version in the Drupal project (for example composer show drupal/views_share).No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-107266")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.