MSRXVulnerabilities / CVE-2026-96390
CVE-2026-96390
Published 2026-10-22 · published (not yet in NVD)
CVE-2026-96390
Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185
4.3 MEDIUM
CVSS 3.1 · CNA
CVSS 3.1 · CNA
0.2%
chance of exploitation in the next 30 days (EPSS; higher than 11% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 11% of CVEs)
Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9.
Scores
Affected products
- Drupal Editoria11y Accessibility Checker: 0.0.0 to < 2.2.23; 3.0.0 to < 3.0.9
Weakness: CWE-267
Also known as: DRUPAL-CONTRIB-2026-185
1 references (advisories, patches, write-ups)
Sources: CVE.org, OSV.dev, FIRST EPSS. Missing ones did not answer or have no record yet.