CVE-2026-87955
CVE-2026-87955 · Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2.0.1.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
ultimate table field
- Versions
- ≥ 0.0.0, < 1.1.1: Affected (semver)
- ≥ 2.0.0, < 2.0.1: Affected (semver)
Update to 1.1.1; Update to 2.0.1
drupal/ultimate_table_field Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.1.1
- ECOSYSTEM: ≥ 2.0.0, < 2.0.1
Update to 1.1.1; Update to 2.0.1