Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.

Medium CVSS 5.3

CVECVE-2026-81165

First seen2026-09-16 20:15 UTC

Disclosed2026-09-02 13:18 UTC

Last updated2026-09-16 20:15 UTC

Channel statusauto

Summary

Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).