Privilege Escalation Vulnerability in Drupal Content Moderation Notifications by Drupal
CVE-2026-81161

Currently unrated

Key Information:

Vendor

Drupal
Status
Content Moderation Notifications
Vendor
CVE Published:
2 September 2026

What is CVE-2026-81161?

A vulnerability in Drupal's Content Moderation Notifications allows unauthorized users to escalate their privileges, compromising the integrity of the moderation process. This issue affects versions ranging from 0.0.0 to 3.9.0, making it crucial for users to update their systems to protect against potential exploitation.

Affected Version(s)

Content Moderation Notifications 0.0.0 < 3.9.0

References

https://www.drupal.org/sa-contrib-2026-107

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lee Rowlands (larowlan)
Luke Leber (luke.leber)
Brian Osborne (bkosborne)
Jonathan Hedstrom (jhedstrom)
Luke Leber (luke.leber)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Lee Rowlands (larowlan)
Juraj Nemec (poker10)
.