SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81158

MEDIUM · CVSS 5.3 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability in the Drupal Entity API allows for incorrect authorization, enabling attackers to perform forceful browsing and potentially access restricted resources. This issue affects all versions from 0.0.0 to 1.8.0 of the Entity API. Organizations using these versions should prioritize remediation to protect sensitive data and maintain system integrity.

CVE
CVE-2026-81158
Severity
MEDIUM
CVSS
5.3
EPSS
0.31%

Original NVD Description

Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.