PT-2026-107757

CVE-2026-107266

Published

2026-10-07

Updated

2026-10-30

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Views Share versions 0.0.0 through 2.0.1

Description Missing authorization allows forceful browsing within the module used to share view displays via iframes. The module fails to sufficiently block access to view displays, which may allow the execution of resource-intensive views and negatively impact site performance. Exploitation requires the attacker to know the specific view and display IDs.

Recommendations Update Views Share to a version later than 2.0.1.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products