CVE-2026-118570

1th percentile - higher than 1% of all known CVEs

The Fasttoggle module for Drupal contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to force unwanted actions on behalf of a logged-in user. The issue affects versions from 0.0.0 to 4.1.1.

An attacker could trick an administrator or user into performing unintended operations on the site, potentially leading to unauthorized configuration changes. The risk increases when the module is used by privileged accounts.

Update the Fasttoggle module to a version later than 4.1.1 or apply the vendor-provided patch. Until then, restrict access to the module's features and verify the origin of requests.