PT-2026-84896

CVE-2026-84920

Published

2026-09-02

Updated

2026-10-22

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Unpublished Node Permissions versions 0.0.0 through 1.8.0

Description An incorrect authorization issue allows forceful browsing. The module, which manages permissions per node content type to control access to unpublished content, incorrectly allows view access for published content, overriding other existing access mechanisms.

Recommendations Update Unpublished Node Permissions to a version later than 1.8.0.

Exploitability

Fix

Impacts

Researchers