CVE-2026-114535

CVE-2026-114535 · DRUPAL-CONTRIB-2026-233

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events. This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity. This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced.

Fix available

Published

2026-10-21T17:46:29Z

Updated

2026-10-21T18:45:03.373626714Z

Stack: php

Check your server →