PT-2026-97679

CVE-2026-96390

Published

2026-09-23

Updated

2026-10-22

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Drupal Editoria11y Accessibility Checker versions 0.0.0 through 2.2.23 Drupal Editoria11y Accessibility Checker versions 3.0.0 through 3.0.9

Description This module implements a client-side accessibility checker that automatically reports results to dashboard views via an API. A privilege escalation issue exists because a permission was incorrectly described as a view permission, while it actually grants edit and delete access to module data, leading to a potential access bypass.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers