Vulnerabilities

Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing.

Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk Update User Roles versions: from 0.0.0 to 1.0.5.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Drupal

Product

Bulk Update User Roles

Weakness

CWE-863

Exposure class

Web platform

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-118567 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing.

   CVE-2026-118584 Drupal
2. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing.

   CVE-2026-118583 Drupal
3. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing.

   CVE-2026-118569 Drupal
4. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing.

   CVE-2026-118557 Drupal
5. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing.

   CVE-2026-118556 Drupal
6. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing.

   CVE-2026-118555 Drupal
7. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

   CVE-2026-118542 Drupal
8. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

   CVE-2026-118541 Drupal
9. 7
   CVE NVD 3d ago

   Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

   CVE-2026-118540 Drupal
10. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing.

    CVE-2026-114571 Drupal
11. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing.

    CVE-2026-114554 Drupal
12. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing.

    CVE-2026-114553 Drupal
13. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing.

    CVE-2026-114545 Drupal
14. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing.

    CVE-2026-114544 Drupal
15. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing.

    CVE-2026-114543 Drupal
16. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing.

    CVE-2026-114540 Drupal
17. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing.

    CVE-2026-114537 Drupal
18. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing.

    CVE-2026-114530 Drupal
19. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing.

    CVE-2026-107307 Drupal
20. 7
    CVE NVD 3d ago

    Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing.

    CVE-2026-107263 Drupal