unscored
CVE-2026-118567
Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing.
Impact
Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk Update User Roles versions: from 0.0.0 to 1.0.5.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Bulk Update User Roles | from 0.0.0 before 1.0.5 |