Vulnerabilities

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing.

Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Drupal

Product

Actstream

Weakness

CWE-863

Exposure class

Web platform

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-107257 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing.

   CVE-2026-118584 Drupal
2. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing.

   CVE-2026-118583 Drupal
3. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing.

   CVE-2026-118569 Drupal
4. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing.

   CVE-2026-118567 Drupal
5. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing.

   CVE-2026-118557 Drupal
6. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing.

   CVE-2026-118556 Drupal
7. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing.

   CVE-2026-118555 Drupal
8. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

   CVE-2026-118542 Drupal
9. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

   CVE-2026-118541 Drupal
10. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

    CVE-2026-118540 Drupal
11. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing.

    CVE-2026-114571 Drupal
12. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing.

    CVE-2026-114554 Drupal
13. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing.

    CVE-2026-114553 Drupal
14. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing.

    CVE-2026-114545 Drupal
15. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing.

    CVE-2026-114544 Drupal
16. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing.

    CVE-2026-114543 Drupal
17. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing.

    CVE-2026-114540 Drupal
18. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing.

    CVE-2026-114537 Drupal
19. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing.

    CVE-2026-114530 Drupal
20. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing.

    CVE-2026-107307 Drupal