CVE-2026-81165

The Blazy module for Drupal is vulnerable to incorrect authorization, enabling attackers to perform forceful browsing and potentially access restricted content. This issue affects all versions from 0.0.0 to 3.0.18, and organizations using these versions should prioritize remediation to protect sensitive data and maintain user access controls.