{"id":"CVE-2026-107267","published":"2026-10-30T04:17:58.113","lastModified":"2026-10-30T04:17:58.113","description":"Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.5.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-208","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}