TI-2026-07459 CVE-2026-8495 · GHSA-7fjf-jmgw-92f2
Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037
Priority MEDIUM 49
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.
Date Ical Project
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Date Ical Project records in CISA KEVNo Date Ical Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Date Ical · all components