CVE-2026-13244

Drupal Tealium iQ Tag Management versions 0.0.0 to 2.4.0 are vulnerable to an improper control of dynamically-determined object attributes, which can lead to object injection attacks. This vulnerability could allow attackers to manipulate object attributes, potentially compromising the integrity and security of the application. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation.