๐Ÿ” CVE Alert

CVE-2026-114571

UNKNOWN 0.0

Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole versions: from 0.0.0 to 1.3.0.

CWE CWE-863
Vendor drupal
Product rabbit hole
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal rabbit hole

Be the first to know when new unknown vulnerabilities affecting drupal rabbit hole are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Drupal / Rabbit Hole
0.0.0 < 1.3.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
drupal.org: https://www.drupal.org/sa-contrib-2026-252

Credits

Marcus Johansson (marcus_johansson) Jakob P (japerry) Mohit Aghera (mohit_aghera) Mohit Aghera (mohit_aghera) Juraj Nemec (poker10)