« Volver al listado

CVE-2026-8491

Estado: AnalizadaBaja (3.7)—

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.

This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adcisolutions — Node View Permissions

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-8491",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-8491",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-20T16:32:33.990332Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.7,
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "mlhess@drupal.org",
      "affectedData": [
        {
          "repo": "https://git.drupalcode.org/project/node_view_permissions",
          "vendor": "Drupal",
          "product": "Node View Permissions",
          "versions": [
            {
              "status": "affected",
              "version": "0.0.0",
              "lessThan": "1.7.0",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "2.0.0",
              "lessThan": "2.0.1",
              "versionType": "semver"
            }
          ],
          "collectionURL": "https://www.drupal.org/project/node_view_permissions",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-05-19T23:16:58.740",
  "references": [
    {
      "url": "https://www.drupal.org/sa-contrib-2026-034",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "mlhess@drupal.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "mlhess@drupal.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-754"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.\n\nThis issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1."
    },
    {
      "lang": "es",
      "value": "Comprobación Incorrecta de Condiciones Inusuales o Excepcionales vulnerabilidad en Drupal Node View Permissions permite la Navegación Forzada.\n\nEste problema afecta a Node View Permissions: desde 0.0.0 antes de 1.7.0, desde 2.0.0 antes de 2.0.1."
    }
  ],
  "lastModified": "2026-07-23T20:10:00.130",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adcisolutions:node_view_permissions:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F92674C7-C0AA-4537-8CA0-8B155C33C03D",
              "versionEndExcluding": "1.7"
            },
            {
              "criteria": "cpe:2.3:a:adcisolutions:node_view_permissions:2.0.0:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20F0D2D9-62CD-4763-9BD3-1BE4AA659F73"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "mlhess@drupal.org"
}