CVE-2026-8491

LowCVSS 3.7

Published: 19/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

The Node View Permissions plugin for Drupal contains an improper check for unusual or exceptional conditions vulnerability, allowing forceful browsing and unauthorized access to resources. Affected versions are before 1.7.0 and from 2.0.0 before 2.0.1.

Risk Assessment

An attacker can access protected content or data that should be restricted, leading to confidentiality breaches.

Recommendation

Immediately update the Node View Permissions plugin to version 1.7.0 or 2.0.1, depending on the major version in use.

Original NVD description (English source)

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.