medium6.5
CVE-2026-107257
Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing.
Impact
Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Actstream | from 2.1.0 before 2.1.1 from 0.0.0 before 2.0.1 |