Missing Authorization Vulnerability in Drupal Swiper Formatter
CVE-2026-114535

Currently unrated

Key Information:

Vendor

Drupal
Status
Swiper Formatter
Vendor
CVE Published:
30 October 2026

What is CVE-2026-114535?

A missing authorization vulnerability in the Drupal Swiper formatter could allow attackers to perform forceful browsing. This weakness affects users of versions 0.0.0 to 2.1.2 and 3.0.1 to 3.1.0 of the Swiper formatter. Exploiting this flaw may enable unauthorized access to restricted content, posing a significant risk to the integrity of the site and its data. It is essential for administrators and users of affected versions to take immediate action to secure their systems by applying the necessary updates.

Affected Version(s)

Swiper formatter 0.0.0 < 2.1.2

Swiper formatter 3.0.1 < 3.1.0

References

https://www.drupal.org/sa-contrib-2026-233

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ryan Solomon (phizes)
Julian Pustkuchen (anybody)
Joshua Sedler (grevil)
Drupal Lady (bbu23)
Joshua Sedler (grevil)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.