CVE-2026-8495
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.
Published May 19, 2026 · updated Jul 23, 2026 · date ical project date ical
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 19, 2026 · NIST NVD
Detected
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.
Jul 23, 2026 · NIST NVD
Updated
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.
Affected
- cpe date ical project/date icalversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-8495
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-8495
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.
nvd.nist.gov