MSRXVulnerabilities / CVE-2026-96384
CVE-2026-96384
Published 2026-10-22 · Awaiting Analysis
CVE-2026-96384
Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180
3.5 LOW
CVSS 3.1 · CNA
CVSS 3.1 · CNA
0.2%
chance of exploitation in the next 30 days (EPSS; higher than 9% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 9% of CVEs)
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.
Scores
Affected products
- Drupal Mermaid Diagram Field: 1.0.4 to < 1.0.9
Weakness: CWE-863
Also known as: DRUPAL-CONTRIB-2026-180
1 references (advisories, patches, write-ups)
Sources: NVD, CVE.org, OSV.dev, FIRST EPSS. Missing ones did not answer or have no record yet.