עברית

Vulnerability Intelligence

CVE-2026-96390

Medium 4.3

Published
Last modified
NVD status
Awaiting Analysis

Description

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9.

References1

Metrics

CVSS 3.1
4.3 MEDIUM Score source: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS — exploit probability
0% percentile: 11 · as of 8 November 2026
CWE
CWE-267

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.