CVE-2026-81158

Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.

Published Sep 2, 2026
CVSS 5.3 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Drupal Entity API

CVE-2026-81158 at the National Vulnerability Database