CVE-2026-107263: Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202

Published Oct 30, 2026

Updated

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7.

Event History

Oct 30, 2026

CVE Published

via MITRE·03:10 AM

Data Sourced

via MITRE·03:10 AM

DescriptionWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Gutenberg versions are affected?

Affected versions are 0.0.0 through 2.15.0 and 3.0.0 through 3.0.7. The provided information does not identify a fixed release.

What does an attacker need to exploit this issue?

The issue is remotely reachable over the network and has low attack complexity, but the attacker must already have low-level privileges. No user interaction is required.

What is the expected security impact?

The severity vector indicates low confidentiality and integrity impact, with no availability impact. The affected condition is an authorization bypass involving forceful browsing.

CVE-2026-107263: Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202

Event History

Frequently Asked Questions

Which Gutenberg versions are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which Gutenberg versions are affected?

What does an attacker need to exploit this issue?

What is the expected security impact?