CVE-2026-81269

MEDIUM 5.3

Data field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

CWE	CWE-862
Vendor	drupal
Product	data field
Ecosystems	PHP CMS
Industries	WebMedia
Published	Sep 2, 2026
Last Updated	Sep 2, 2026

Stay Ahead of the Next One

Get instant alerts for drupal data field

Be the first to know when new medium vulnerabilities affecting drupal data field are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / Data field

0.0.0 < 2.0.13

References

NVD ↗ CVE.org ↗ EPSS Data ↗

drupal.org: https://www.drupal.org/sa-contrib-2026-108 drupal.org: https://www.drupal.org/sa-contrib-2026-111

Credits

Marcus Johansson (marcus_johansson) Drew Webber (mcdruid) Steven Jones (steven jones) Joseph Olstad (joseph.olstad) NGUYEN Bao (lazzyvn) Marcus Johansson (marcus_johansson) Steven Jones (steven jones) Swan Kalata (akalata) David Stoline (dstol) Greg Knaddison (greggles) Drew Webber (mcdruid) Juraj Nemec (poker10) Jess (xjm)