Unpublished Node Permissions (Drupal) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-22. Vendor: Drupal.

CVEs of Unpublished Node Permissions

• CVE-2026-84920 - CVSS 5.3 (medium), 2026-10-22: Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions…
• CVE-2026-4933 - CVSS 7.5 (high), 2026-03-26: Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from…