← All advisories

Medium severity4.8NVD Advisory· Published Feb 4, 2026· Updated Jun 17, 2026

CVE-2026-1553

CVE-2026-1553

Description

Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Drupal Canvas Project/Drupal Canvas
cpe:2.3:a:drupal_canvas_project:drupal_canvas:*:*:*:*:*:drupal:*:*
Range: <1.0.4
Drupal/Drupal Canvasllm-create2 versions
<1.0.4+ 1 more
- (no CPE)range: <1.0.4
- (no CPE)range: 0.0.0

Patches

Vulnerability mechanics

References

1

www.drupal.org/sa-contrib-2026-006nvdVendor Advisory

News mentions

0

No linked articles in our index yet.