CVE-2026-81269

The Drupal Data field module (versions 0.0.0 to 2.0.13 ) contains a Missing Authorization vulnerability that allows Forceful Browsing . The root cause is that the module fails to sufficiently verify access permissions when returning structured data values through its JSON endpoints . This allows ...