Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-107258 DRUPAL-CONTRIB-2026-199EUVD-2026-113576GHSA-87mj-ffj6-qhh8

Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6.

Affected products

VendorProductAffectedFixed
Drupal Inline Entity Form Dialog 0.0.0 – < 1.0.6 1.0.6

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/inline_entity_form_dialog < 1.0.6 1.0.6 DRUPAL-CONTRIB-2026-199

Advisories 1

References