CVE-2026-114573

16th percentile - higher than 16% of all known CVEs

The vulnerability in the Drupal Monster Menus module involves improperly controlled modification of dynamically-determined object attributes, allowing Object Injection. This issue affects versions from 0.0.0 to 9.5.6.

Object injection may allow an attacker to manipulate application data or perform unauthorized operations within the Drupal context. The actual risk depends on whether the module is used in a production environment.

Update the Monster Menus module to a version later than 9.5.6. If an update is not possible, consider disabling the module until the fix is deployed.