Live › vulnerability › CVE-2026-96390
Go to dashboardThe Drupal Editoria11y Accessibility Checker module defines a privilege with unsafe actions, which allows privilege escalation. An attacker with a low-privileged Drupal account could gain rights beyond what they were granted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Drupal Editoria11y Accessibility Checker module in the affected version ranges, from 0.0.0 to 2.2.23 and from 3.0.0 to 3.0.9. Sites without this module, or running a fixed version, are not affected.
No product ranges from the sources yet.
drush pm:list --filter=editoria11y or in the module's *.info.yml file.2.2.24 or later in the 2.x line, or to 3.0.10 or later in the 3.x line.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9.
This page as .md · .json · in your agent: get_signal("CVE-2026-96390")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.