CVE-2026-18985: Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093

Q: Which versions are affected?

Drupal Edit in-place field versions from 0.0.0 through 2.1.1 are affected.

Q: What type of access is required to exploit this issue?

The vulnerability is described as an incorrect authorization issue that allows forceful browsing. The provided information does not specify any required authentication level or privileges.

Published Aug 25, 2026

Updated

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.

Affected Software

1 affected component

Drupal Edit in-place field>=0.0.0<=2.1.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Drupal Edit in-place field to a version that resolves this vulnerability.
Fixed in 2.1.1Patch SA-CONTRIB-2026-093

Event History

Aug 25, 2026

CVE Published

via MITRE·10:19 PM

Data Sourced

via MITRE·10:19 PM

DescriptionWeakness

Data Sourced

via NVD·11:16 PM

DescriptionWeakness

Frequently Asked Questions

Which versions are affected?

Drupal Edit in-place field versions from 0.0.0 through 2.1.1 are affected.

What type of access is required to exploit this issue?

The vulnerability is described as an incorrect authorization issue that allows forceful browsing. The provided information does not specify any required authentication level or privileges.

CVE-2026-18985: Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093

Affected Software

Remediation

Event History

Frequently Asked Questions

Which versions are affected?

What type of access is required to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which versions are affected?

What type of access is required to exploit this issue?