CVE-2026-96390
CVE-2026-96390 · Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
editoria11y accessibility checker
- Versions
- ≥ 0.0.0, < 2.2.23: Affected (semver)
- ≥ 3.0.0, < 3.0.9: Affected (semver)
Update to 2.2.23; Update to 3.0.9
drupal/editoria11y Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.2.23
- ECOSYSTEM: ≥ 3.0.0, < 3.0.9
Update to 2.2.23; Update to 3.0.9