CVE-2026-96384: Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

Q: Which deployments should be prioritized for remediation?

Drupal sites using Mermaid Diagram Field versions 1.0.4 through 1.0.9 are affected.

Q: What exploitation behavior should monitoring or investigation focus on?

The vulnerability involves forceful browsing, so investigate attempts to directly access resources or endpoints that should be restricted by authorization controls.

Published Oct 22, 2026

Updated

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.

Affected Software

1 affected component

Drupal Mermaid Diagram Field>=1.0.4<=1.0.9

Event History

Oct 22, 2026

CVE Published

via MITRE·01:21 AM

Data Sourced

via MITRE·01:21 AM

DescriptionWeakness

Frequently Asked Questions

Which deployments should be prioritized for remediation?

Drupal sites using Mermaid Diagram Field versions 1.0.4 through 1.0.9 are affected.

What exploitation behavior should monitoring or investigation focus on?

The vulnerability involves forceful browsing, so investigate attempts to directly access resources or endpoints that should be restricted by authorization controls.

CVE-2026-96384: Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

Affected Software

Event History

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What exploitation behavior should monitoring or investigation focus on?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What exploitation behavior should monitoring or investigation focus on?