🔐 CVE Alert

CVE-2026-73477

MEDIUM 5.3

Quick Tabs - Moderately critical - Access bypass - SA-CONTRIB-2026-099

CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1.

CWE CWE-863
Vendor drupal
Product quick tabs
Ecosystems
Industries
WebMedia
Published Sep 2, 2026
Last Updated Sep 2, 2026
Stay Ahead of the Next One

Get instant alerts for drupal quick tabs

Be the first to know when new medium vulnerabilities affecting drupal quick tabs are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Quick Tabs
0.0.0 < 4.3.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-099

Credits

Joël Pittet (joelpittet) Joël Pittet (joelpittet) Swan Kalata (akalata) Neil Drumm (drumm) Greg Knaddison (greggles)