CVE-2026-118569

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118569 Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118569 Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118569

The Drupal Fasttoggle module (versions 0.0.0 to 4.1.1 ) contains an Incorrect Authorization vulnerability (CWE-863) that allows for Forceful Browsing . The module fails to sufficiently verify if a user has permission to update a specific entity when using the "Use Fasttoggle" permission to toggle...

CVE-2026-118569

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

EUVD-2026-113694

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570

The Fasttoggle module for Drupal (versions 0.0.0 to 4.1.1 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The module fails to sufficiently protect its toggle URL, which allows users to quickly change the publication status, promotion, and stickiness of nodes and comments. An attacker can...

EUVD-2026-113693

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570 Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570 Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118570: Drupal Fasttoggle: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery

Cross-Site Request Forgery CSRF vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

CVE-2026-118569: Drupal Fasttoggle: Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing

Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1...

DRUPAL-CONTRIB-2026-283

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently protect against cross-site request forgery CSRF on its toggle URL, under the scenario where a user...

DRUPAL-CONTRIB-2026-282

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently check access to the entity being toggled, under the scenario where a user with the "Use Fasttoggle"...

PT-2026-130597

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently protect against cross-site request forgery CSRF on its toggle URL, under the scenario where a user...

PT-2026-130596

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently check access to the entity being toggled, under the scenario where a user with the "Use Fasttoggle"...

Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently check access to the entity being toggled, under the scenario where a user with the "Use Fasttoggle"...

Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283

This module enables you to quickly toggle the publication status, promotion and stickiness of nodes, and the publication status of comments, from links on the page. The module doesn't sufficiently protect against cross-site request forgery CSRF on its toggle URL, under the scenario where a user...