Live › vulnerability › CVE-2026-107307
SmartLinker AI, a Drupal module, has an incorrect authorization flaw that lets a visitor reach content by forceful browsing. An attacker may read pages or actions they should not be able to access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Sites running the Drupal SmartLinker AI module in the affected version range are exposed. The sources do not describe the exact configuration or which routes are involved, so whether a given site is reachable by an unauthenticated visitor is unknown.
No product ranges from the sources yet.
composer show drupal/smartlinker_ai (module name unknown from sources; verify)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-107307")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.