CVE-2026-114553

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-114553

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114553.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-114553

Aliases

DRUPAL-CONTRIB-2026-241

Published

2026-10-30T03:09:27Z

Modified

2026-11-08T02:30:45Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator

Summary

Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Details

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

Database specific

{
    "cna_assigner": "drupal",
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114553.json"
}

References

Affected packages

Git / git.drupalcode.org/project/frontend_editing

Affected ranges

Type

GIT

Repo

https://git.drupalcode.org/project/frontend_editing

Events

Introduced

Fixed

c8f4c150dc9da1df658def274fad45ed5ed655cf

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0.0.0"
                },
                {
                    "fixed": "1.9.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        }
    ]
}

Affected versions

1.*

1.0.0-alpha1

1.0.0-alpha2

1.1.0

1.1.0-alpha3

1.1.0-alpha4

1.1.0-rc1

1.1.0-rc2

1.1.0-rc3

1.1.0-rc4

1.1.1

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.3.0

1.4.0

1.4.1

1.5.0

1.5.1

1.5.2

1.6.0

1.6.1

1.6.2

1.6.3

1.6.4

1.7.0

1.7.1

1.7.2

1.7.3

1.8.0

1.8.1

1.8.10

1.8.11

1.8.12

1.8.13

1.8.14

1.8.15

1.8.16

1.8.17

1.8.18

1.8.19

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9.0

1.9.1

1.9.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114553.json"