🔐 CVE Alert

CVE-2026-81161

LOW 3.3

Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107

CVSS Score
3.3
EPSS Score
0.0%
EPSS Percentile
0th

Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.

CWE CWE-267
Vendor drupal
Product content moderation notifications
Ecosystems
Industries
WebMedia
Published Sep 2, 2026
Last Updated Sep 2, 2026
Stay Ahead of the Next One

Get instant alerts for drupal content moderation notifications

Be the first to know when new low vulnerabilities affecting drupal content moderation notifications are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Content Moderation Notifications
0.0.0 < 3.9.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-107

Credits

Lee Rowlands (larowlan) Luke Leber (luke.leber) Brian Osborne (bkosborne) Jonathan Hedstrom (jhedstrom) Luke Leber (luke.leber) Swan Kalata (akalata) Greg Knaddison (greggles) Lee Rowlands (larowlan) Juraj Nemec (poker10)