CVE-2026-18259 — Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.
Published: 2026-08-25 · CVSS: 7.5 · CVSS 3.1
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7