CVE-2026-13241

A missing authorization vulnerability in Drupal Paragraphs versions 0.0.0 to 1.21.0 allows attackers to exploit forceful browsing, potentially gaining unauthorized access to restricted content. Organizations using affected versions of Drupal should prioritize patching this vulnerability to mitigate the risk of unauthorized data exposure. This is particularly critical for sites that handle sensitive information or user-generated content.