CVE Intelligence

Diff Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Diff Project products: 1 record(s), with severity, exploitation and fixes.

Diff 1

Exploited only (KEV) →

CVE-2026-73478 Medium · 5.3 CWE-863 Sep 2, 2026
Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096
Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.