CVE-2026-1553
Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006
Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.
CVSS 3.1 · 4.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products