FlowDrop

FlowDrop Missing Authorization Vulnerability (CVE-2026-58589) — Medium Severity

Understanding the FlowDrop Missing Authorization Vulnerability A security flaw has been identified in the FlowDrop module for Drupal, labeled as a “Missing Authorization” vulnerability. This issue, identified as CVE-2026-58589, could allow for what’s known as “Forceful Browsing.” In simple terms,…

Alex Joseph
July 14, 2026

Drupal FlowDrop Missing Authorization Vulnerability (CVE-2026-58590) — Medium Severity

A critical security update has been released for the Drupal FlowDrop module, addressing a ‘Missing Authorization’ vulnerability that could allow for forceful browsing. This issue, identified as CVE-2026-58590, affects versions of FlowDrop up to and including 1.6.0. Site administrators and…

Alex Joseph
July 14, 2026