CVE-2026-13232

LowCVSS 3.1

Published: 10/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

An incorrect authorization vulnerability in the Drupal Advanced Content Feedback (admin_feedback) module allows forceful browsing, enabling unauthorized access to resources. Affected versions range from 0.0.0 to 2.8.0.

Risk Assessment

An attacker can access sensitive data or functions without proper permissions, leading to information disclosure or unauthorized actions within the Drupal system.

Recommendation

Immediately update the Advanced Content Feedback module to version 2.8.1 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.