CVE-2026-118567 | Drupal Bulk Update User Roles Plugin up to 1.0.4 improper authorization

October 30, 2026 Yanac

A vulnerability marked as critical has been reported in Drupal Bulk Update User Roles Plugin up to 1.0.4. This vulnerability affects unknown code. The manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2026-118567. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More