CVE-2026-114553

Low risk· EPSS 4%

Published: 30/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

The vulnerability in the Drupal Frontend Editing module is due to incorrect authorization, allowing Forceful Browsing. This issue affects versions from 0.0.0 to 1.9.3.

Risk Assessment

Forceful browsing may allow an attacker to access resources that should be inaccessible. This could lead to information disclosure or unauthorized actions.

Recommendation

Update the Frontend Editing module to a version later than 1.9.3. Review permission configuration to restrict access to sensitive paths.

Other vulnerabilities in Drupal Frontend Editing

CVE-2026-114541Low risk· EPSS 1%
The Drupal Frontend Editing module contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to force unwanted actions on behalf of a logged-in user. This issue affects versions from 0.0.0 to 1.9.3.

Original NVD description (English source)

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS