CVE-2026-118583

NONE EPSS 0.13%
Updated Oct 30, 2026
Drupal
Parameter Value
Affected Versions 0.0.0 — 1.6.0.
Type CWE-863 (Incorrect Authorization)
Vendor Drupal
Public PoC No

Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0.