Live › vulnerability › CVE-2026-114553
The Drupal Frontend Editing module has an authorization flaw that lets a user reach pages they should not see by browsing to them directly. The sources do not say what data or actions are exposed beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Drupal sites that run the Frontend Editing module at a version within the affected range. The sources do not describe the exact configuration or roles needed to be exposed, so the exposure scope is unknown.
No product ranges from the sources yet.
composer show drupal/frontend_editing if it is a Composer install).1.9.3 (the affected range is 0.0.0 to 1.9.3).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-114553")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.