CVE-2026-114535

Name of the Vulnerable Software and Affected Versions Drupal Swiper formatter versions 0.0.0 through 2.1.2 Drupal Swiper formatter versions 3.0.1 through 3.1.0

Description An authorization flaw allows forceful browsing via a route used to display published content entities in a dialog. The system fails to sufficiently verify if the current user has access to the specific entity being requested. This issue is partially mitigated as field-level access controls remain active and only rendered output is returned.

Recommendations Update Drupal Swiper formatter versions 0.0.0 through 2.1.2 to a version newer than 2.1.2. Update Drupal Swiper formatter versions 3.0.1 through 3.1.0 to a version newer than 3.1.0.