CVE-2026-1553

CVSS Score & Metrics

Base Score

4.8 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N                                    

Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.

Published Date

February 04, 2026

Last Modified

February 11, 2026

CWE ID

CWE-863

Source

NVD

Vendor

drupal_canvas_project

Product

drupal_canvas