CVE-2026-96380: CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage Analyzer versions: from 1.0.0 to 1.0.2.

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are affected?

Drupal installations using CSS Usage Analyzer versions 1.0.0 through 1.0.2 are affected.

What can an attacker do to exploit this issue?

The vulnerability is an improper access-control issue that allows forceful browsing. The provided information does not specify the affected routes, required attacker privileges, or resulting impact.

CVE-2026-96380: CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189

Event History

Frequently Asked Questions

Which installations are affected?

What can an attacker do to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What can an attacker do to exploit this issue?