CVE-2026-81161Low· 3.3▾ SunlitPrivilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.
content_moderation_notifications < 8.x-3.9Upgrade past the affected range:
content_moderation_notifications 8.x-3.9Connected by shared product, vendor, weakness, or advisory.
CVE-2026-57202High· 8.1Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
CVE-2026-96390Medium· 4.3Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185
CVE-2026-96363NoneWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161
CVE-2026-96367Medium· 4.6Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162
CVE-2026-96371Medium· 5.4Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
CVE-2026-109520High· 8.8A flaw has been found in Colorful iGameCenter 2.0.0.82