PT-2026-97674

CVE-2026-96384

Published

2026-09-23

Updated

2026-10-22

Description by

CVSS 3.1

3.5

Low

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Mermaid Diagram Field versions 1.0.4 through 1.0.9

Description An incorrect authorization issue allows forceful browsing. The module fails to properly limit access to modal content and does not sufficiently respect default revision behavior. Exploitation requires the attacker to have the modal display option enabled for the field or knowledge of the modal route and entity ID.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers