Live › vulnerability › CVE-2026-107311
Permissions by Term, a Drupal module that controls access to content by taxonomy term, has an improper check for unusual conditions that allows forceful browsing. An attacker can reach pages they should not see by requesting them directly.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Drupal sites that use the Permissions by Term module to restrict access to content by taxonomy term are exposed. Sites without this module installed are not affected. The sources do not say whether a specific configuration is required to trigger the flaw.
No product ranges from the sources yet.
permissions_by_term module version in the Drupal project (for example with composer show drupal/permissions_by_term).3.1.41.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41.
This page as .md · .json · in your agent: get_signal("CVE-2026-107311")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.