CVE-2026-81158
Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.
| CWE | CWE-863 |
| Vendor | drupal |
| Product | entity api |
| Ecosystems | |
| Industries | WebMedia |
| Published | Sep 2, 2026 |
| Last Updated | Sep 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal entity api
Be the first to know when new medium vulnerabilities affecting drupal entity api are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / Entity API
0.0.0 < 1.8.0
Credits
Douglas Groene (dgroene) Matt Glaman (mglaman) Sascha Grossenbacher (berdir) Klaus Purer (klausi) Kristiaan Van den Eynde (kristiaanvandeneynde) Matt Glaman (mglaman) Swan Kalata (akalata) Greg Knaddison (greggles) Lee Rowlands (larowlan) Juraj Nemec (poker10) Jess (xjm)