CVE-2026-96390

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9...

CVE-2026-96390 Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9...

CVE-2026-96390

The Editoria11y Accessibility Checker module for Drupal is vulnerable to a Privilege Escalation issue (CWE-267) affecting versions 0.0.0 to 2.2.23 and 3.0.0 to 3.0.9 . The root cause is an incorrect permission description where a permission labeled as "view" actually grants unauthorized edit and ...

EUVD-2026-107816

Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9...

Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185

This module runs a client-side accessibility checker that automatically reports results to dashboard views over an API. The module incorrectly described a permission as a "view" permission when it grants edit and delete access to module data, resulting in a potential access bypass...