CWE-284 (2660) CWE-79 (1928) CWE-416 (1558) CWE-862 (1259) CWE-122 (1130) CWE-89 (1124) CWE-125 (1089) CWE-22 (1052) CWE-306 (873) CWE-200 (871) CWE-20 (832) CWE-787 (739) CWE-78 (728) CWE-918 (712) CWE-863 (671) CWE-94 (660) CWE-74 (605) CWE-639 (583) CWE-400 (547) CWE-269 (512) CWE-119 (507) CWE-502 (494) CWE-287 (456) CWE-770 (453) CWE-121 (446) CWE-190 (420) CWE-362 (394) CWE-77 (384) CWE-476 (322) CWE-352 (289)

CWE-863

671 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-114530 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects D
CVE-2026-114537 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issu
CVE-2026-114540 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects
CVE-2026-114543 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. Thi
CVE-2026-114544 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This iss
CVE-2026-114545 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This iss
CVE-2026-114553 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issu
CVE-2026-114554 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue
CVE-2026-114571 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue aff
CVE-2026-118540 — — 0.0015 2026-10-30 Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue a
CVE-2026-118541 — — 0.0015 2026-10-30 Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue a
CVE-2026-118542 — — 0.0015 2026-10-30 Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue a
CVE-2026-118548 — — 0.0015 2026-10-30 Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injecti
CVE-2026-118555 — — 0.0015 2026-10-30 Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issu
CVE-2026-118556 — — 0.0015 2026-10-30 Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This iss
CVE-2026-118557 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This iss
CVE-2026-118567 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. Thi
CVE-2026-118569 — — 0.0014 2026-10-30 Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affe
CVE-2026-118583 — — 0.0013 2026-10-30 Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This iss
CVE-2026-118584 — — 0.0013 2026-10-30 Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This iss
CVE-2026-73322 — — — 2026-10-30 Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker