CVE-2026-13232

Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.

Score

CVSS 3.1 3.1 Low

Status

Analyzed - mlhess@drupal.org

Published

2026-07-10

Last modified

2026-10-25

Weaknesses

CWE-863

Affected products

• Advanced Content Feedback (Anuaralfetahe)
• Advanced Content Feedback Aka Admin Feedback (Drupal)

References

• https://www.drupal.org/sa-contrib-2026-052