Live › vulnerability › CVE-2026-114545
The Drupal Fullcalendar View module has an incorrect authorization check that lets a visitor reach content by forceful browsing. Affected versions are listed as 0.0.0 through 5.2.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Sites running the Drupal Fullcalendar View module at a version in the stated range. The sources do not say which views or roles are exposed, so unknown whether anonymous visitors can reach the data.
No product ranges from the sources yet.
drush pm:list or the Extend page) and see whether it falls within 0.0.0 to 5.2.6.5.2.6; the exact fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalendar View versions: from 0.0.0 to 5.2.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-114545")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.