CVE-2026-3527
AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022
Summary
AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022
Original description
The description as published by the source.
Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/ajax_dashboard
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0"}],"database_specific":{"constraint":"<3.1.0"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org