PT-2026-107754
CVE-2026-107263
·
Published
2026-10-07
·
Updated
2026-10-30
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Drupal Gutenberg versions 0.0.0 through 2.15.0
Drupal Gutenberg versions 3.0.0 through 3.0.7
Description
An incorrect authorization issue allows forceful browsing. The module fails to sufficiently check entity access across several editor endpoints. Exploitation requires the attacker to possess a role with the "use gutenberg" permission.
Recommendations
Update Drupal Gutenberg to a version later than 2.15.0.
Update Drupal Gutenberg to a version later than 3.0.7.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾