Live › vulnerability › CVE-2026-87954
Go to dashboardThe Drupal Taxonomy Term Glossary module fails to check authorization on some pages, so a visitor can reach content by forceful browsing. The sources do not say which data is exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Drupal Taxonomy Term Glossary module at version or earlier are affected. The sources do not say which pages or data are exposed, or whether anonymous visitors can reach them. Sites that do not use this module can skip it.
4.6.0No product ranges from the sources yet.
composer show drupal/taxonomy_term_glossary if it is installed via Composer); versions up to 4.6.0 are listed as affected4.6.0; the sources do not name the fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-87954")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.