Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0.
CVE-2026-118584
NONE
EPSS 0.13%
Updated Oct 30, 2026
Drupal
CVE Details
CVE ID
CVE-2026-118584
Published Date
Oct 30, 2026
Vendor
Drupal
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.13%
Likelihood of exploitation in next 30 days
Percentile:
2.8th percentile (higher than 2.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory