SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81166

MEDIUM · CVSS 5.3 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Drupal Digital Signage Framework is vulnerable to a missing authorization issue that permits forceful browsing, potentially allowing unauthorized access to restricted content. This vulnerability affects all versions from 0.0.0 to 2.6.1. Organizations using the affected versions should prioritize remediation to prevent unauthorized data exposure.

CVE
CVE-2026-81166
Severity
MEDIUM
CVSS
5.3
EPSS
0.31%

Original NVD Description

Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.