CVE-2026-114535

Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events.

This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity.

This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced.