Vulnerability Details CVE-2026-73478
Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 8.6%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2026-73478
-
cpe:2.3:a:diff_project:diff:1.8.0
-
cpe:2.3:a:diff_project:diff:2.0.0
-
cpe:2.3:a:diff_project:diff:2.1.0
-
cpe:2.3:a:diff_project:diff:5.x-1.0
-
cpe:2.3:a:diff_project:diff:5.x-1.1
-
cpe:2.3:a:diff_project:diff:5.x-1.2
-
cpe:2.3:a:diff_project:diff:5.x-2.0
-
cpe:2.3:a:diff_project:diff:5.x-2.1
-
cpe:2.3:a:diff_project:diff:6.x-1.0
-
cpe:2.3:a:diff_project:diff:6.x-2.0
-
cpe:2.3:a:diff_project:diff:6.x-2.1
-
cpe:2.3:a:diff_project:diff:6.x-2.2
-
cpe:2.3:a:diff_project:diff:6.x-2.3
-
cpe:2.3:a:diff_project:diff:7.x-3.0
-
cpe:2.3:a:diff_project:diff:7.x-3.1
-
cpe:2.3:a:diff_project:diff:7.x-3.2
-
cpe:2.3:a:diff_project:diff:7.x-3.3
-
cpe:2.3:a:diff_project:diff:7.x-3.4
-
cpe:2.3:a:diff_project:diff:7.x-3.5
-
cpe:2.3:a:diff_project:diff:8.x-1.0
-
cpe:2.3:a:diff_project:diff:8.x-1.1
-
cpe:2.3:a:diff_project:diff:8.x-1.10
-
cpe:2.3:a:diff_project:diff:8.x-1.2
-
cpe:2.3:a:diff_project:diff:8.x-1.3
-
cpe:2.3:a:diff_project:diff:8.x-1.4
-
cpe:2.3:a:diff_project:diff:8.x-1.5
-
cpe:2.3:a:diff_project:diff:8.x-1.6
-
cpe:2.3:a:diff_project:diff:8.x-1.7
-
cpe:2.3:a:diff_project:diff:8.x-1.8
-
cpe:2.3:a:diff_project:diff:8.x-1.9