CVE-2026-114553: Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241
Published Oct 30, 2026
·Updated
Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
Affected Software
1 affected component
Drupal Frontend Editing>=0.0.0<=1.9.3
Event History
Oct 30, 2026
CVE Published
via MITRE·03:09 AM
Data Sourced
via MITRE·03:09 AM
DescriptionWeakness
Data Sourced
via OSV·03:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Drupal sites using the Frontend Editing module in versions from 0.0.0 through 1.9.3 are affected.
2
What access does an attacker need to exploit this issue?
The available information identifies the weakness as forceful browsing caused by incorrect authorization, but does not specify any required authentication level or permissions.
3
How can I determine whether my site is exposed?
Check whether the Frontend Editing module is installed and confirm its version. Versions up to and including 1.9.3 fall within the affected range.