High severity8.1NVD Advisory· Published Aug 25, 2026· Updated Aug 28, 2026

CVE-2026-18985

Description

Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Drupal/Edit in-place fieldllm-fuzzy
Range: <=2.1.1

Patches

Vulnerability mechanics

References

www.drupal.org/sa-contrib-2026-093nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000