CVE-2026-81164: Entity PDF Project Entity PDF

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.

Affected products

• Entity PDF Project Entity PDF: from 2.0.0, before 2.1.5 (fixed in 2.1.5); from 8.x-1.0, up to and including 8.x-1.1

Published 2026-09-02. Last modified 2026-10-07.