Privilege Escalation Vulnerability in Drupal Custom Formatters
CVE-2026-114524

Currently unrated

Key Information:

Vendor

Drupal
Status
Custom Formatters
Vendor
CVE Published:
30 October 2026

What is CVE-2026-114524?

A vulnerability within the Custom Formatters module for Drupal allows unauthorized users to escalate privileges, potentially gaining access to restricted actions and functionalities. This can lead to improper access control and manipulation of data within the Drupal environment. Affected versions range from 0.0.0 to 4.2.1. It is recommended that users update to the latest version to mitigate these security risks.

Affected Version(s)

Custom Formatters 0.0.0 < 4.2.1

References

https://www.drupal.org/sa-contrib-2026-225

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Stuart Clark (deciphered)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.