CVE-2026-81158 | Drupal Entity API up to 1.7.x improper authorization

September 2, 2026 Yanac

A vulnerability was found in Drupal Entity API up to 1.7.x and classified as critical. The impacted element is an unknown function. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-81158. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More