Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-205 (CVE-2026-107266)

    Vulnerability from drupal – Published: 2026-10-07 16:29 – Updated: 2026-10-07 16:29 – Source website
    VLAI
    Details

    This module enables you to "share" a view display within another website via an iframe.

    The module doesn't sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance.

    This vulnerability is mitigated by the fact that an attacker must know the view and display IDs.

    Credits
    Hemant Gupta (guptahemant) www.drupal.org/u/guptahemant
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c2.0.1"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/views_share"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c2.0.1"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-107266"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/guptahemant"
      ],
      "name": "Hemant Gupta (guptahemant)"
    }
  ],
  "details": "This module enables you to \"share\" a view display within another website via an iframe.\n\nThe module doesn\u0027t sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance.\n\nThis vulnerability is mitigated by the fact that an attacker must know the view and display IDs.",
  "id": "DRUPAL-CONTRIB-2026-205",
  "modified": "2026-10-07T16:29:40.000Z",
  "published": "2026-10-07T16:29:40.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-205"
    }
  ],
  "schema_version": "1.7.0"
}