Description
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.
Affected products
content_moderation_notifications_project: content moderation notifications
References1
- www.drupal.org/sa-contrib-2026-107 Vendor Advisory
Metrics
- CVSS 3.1
-
3.3
LOW
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N - EPSS — exploit probability
- 0% percentile: 11 · as of 3 November 2026
- CWE
- CWE-267
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.