CVE-2026-114537

Name of the Vulnerable Software and Affected Versions View Unpublished versions 0.0.0 through 1.5.0

Description An incorrect authorization issue allows forceful browsing. In multilingual sites, for nodes containing at least one unpublished translation, the module grants view access to the published translations of that node to any user with the "access content" permission. This action overrides restrictions established by other node access modules, such as Content Access or Domain Access, which may have been intended to restrict access to those specific translations.

Recommendations Update View Unpublished to a version later than 1.5.0.