EUVD-2026-30991
Improper Check for Unusual or Exceptional Conditions (CWE-754)
GHSA-xrm3-543w-4g3q
3.7
CVSS 3.1
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Lifecycle Timeline
4
Analysis Generated
May 20, 2026 - 18:25 vuln.today
CVSS changed
May 20, 2026 - 18:22 NVD
3.7 (LOW)
Patch available
May 19, 2026 - 23:02 EUVD
CVE Published
May 19, 2026 - 22:28 nvd
UNKNOWN (no severity yet)
DescriptionNVD
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.
This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1.
AnalysisAI
Forceful browsing in the Drupal Node View Permissions module exposes restricted node content to unauthenticated network attackers under high-complexity conditions. Affected are all installations running versions 0.0.0-1.7.0 (branch 1.x) and 2.0.0-2.0.1 (branch 2.x) of the module. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).