CVE-2026-96384

The Drupal Mermaid Diagram Field module (versions 1.0.4 to 1.0.9 ) contains an Incorrect Authorization vulnerability (CWE-863) that enables Forceful Browsing . The root cause is that the module fails to properly respect default revision behavior and does not adequately limit access to content dis...