File Access Fix Deprecated (Drupal) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-26. Vendor: Drupal.

CVEs of File Access Fix Deprecated

• CVE-2026-3526 - CVSS 5.3 (medium), 2026-03-26: Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from…
• CVE-2026-3525 - CVSS 5.3 (medium), 2026-03-26: Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from…