SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81269

MEDIUM · CVSS 5.3 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A missing authorization vulnerability in the Data field component of Drupal allows for forceful browsing, potentially enabling unauthorized access to sensitive data. This affects all versions from 0.0.0 to 2.0.13, and organizations using these versions should prioritize remediation to protect against unauthorized data exposure.

CVE
CVE-2026-81269
Severity
MEDIUM
CVSS
5.3
EPSS
0.33%

Original NVD Description

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.