CVE-2026-18259

Summary

Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.

Affected Software

VendorProductVersion RangeStatus
DrupalToken Content Access0.0.0 < 3.1.2affected

Weaknesses

  • CWE-208: CWE-208 Observable Timing Discrepancy

References