CVE-2026-81269

MediumCVSS 5.3

Published: 02/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 02/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions from 0.0.0 to 2.0.13.

An attacker can access unauthorized data or functionality, potentially leading to information disclosure or unauthorized changes.

Update the Data field module to a version above 2.0.13 and check for unauthorized access to resources.

Original NVD description (English source)

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS