VYPR

Field Collection

by Drupal

CVEs (1)

  • CVE-2026-77152MedOct 31, 2026
    risk 0.34cvss —epss 0.00

    Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit field collections" permission to bypass access control on the parent (host) entity. The access check for field collection items (field_collection_item_access()) granted…