← CVE Intelligence

CVE-2026-81158

Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113 PUBLISHED

Description (CNA)

Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.

Affected (CNA)

Vendor / productVersions
Drupal / Entity APIaffected 0.0.0 before 1.8.0

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.