Pankm
Monthly
Missing authentication on a critical function in the Drupal PanKM contributed module allows a network-accessible, high-privilege attacker-given required user interaction-to bypass module authorization controls and achieve high confidentiality and integrity impact against all currently released versions. All known PanKM releases are affected (CPE wildcard cpe:2.3:a:drupal:pankm:*:*:*:*:*:*:*:*), with the Drupal security team (sa-contrib-2026-083) confirming the issue. No public exploit code has been identified at time of analysis, and SSVC confirms exploitation status as none.
Missing authentication on a critical function in the Drupal PanKM contributed module allows a network-accessible, high-privilege attacker-given required user interaction-to bypass module authorization controls and achieve high confidentiality and integrity impact against all currently released versions. All known PanKM releases are affected (CPE wildcard cpe:2.3:a:drupal:pankm:*:*:*:*:*:*:*:*), with the Drupal security team (sa-contrib-2026-083) confirming the issue. No public exploit code has been identified at time of analysis, and SSVC confirms exploitation status as none.