CVE-2026-114535
Low risk· EPSS 4%Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The Drupal Swiper formatter module contains a missing authorization vulnerability that allows forceful browsing. This issue affects versions from 0.0.0 to 2.1.2 and from 3.0.1 to 3.1.0.
Risk Assessment
An attacker could access resources or functionality they are not authorized to use, potentially leading to data disclosure or modification. Exploitation requires only an authenticated session.
Recommendation
Update the Swiper formatter module to a version later than 3.1.0. Verify that no outdated versions of the module remain installed.
Other vulnerabilities in Drupal Swiper formatter
Original NVD description (English source)
Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS