High severity8.1NVD Advisory· Published Jul 10, 2026· Updated Jul 14, 2026
CVE-2026-55809
CVE-2026-55809
Description
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions: from 0.0.0 to 1.2.
Affected products
2- cpe:2.3:a:flag_attendance_field_project:flag_attendance_field:*:*:*:*:*:drupal:*:*Range: <1.2
- Range: 0.0.0 - 1.2
Patches
Vulnerability mechanics
References
1- www.drupal.org/sa-contrib-2026-049nvdVendor Advisory
News mentions
0No linked articles in our index yet.