Security Advisory

CVE-2026-3526

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-26 20:02:55
Last updated 2026-03-27 18:17:51
Assigner drupal
State PUBLISHED

Description

Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.