🔐 CVE Alert

CVE-2026-114524

UNKNOWN 0.0

Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.

CWE CWE-267
Vendor drupal
Product custom formatters
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal custom formatters

Be the first to know when new unknown vulnerabilities affecting drupal custom formatters are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Custom Formatters
0.0.0 < 4.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-225

Credits

Marcus Johansson (marcus_johansson) Stuart Clark (deciphered) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10)