Privilege Escalation Vulnerability in Drupal Content Moderation Notifications by Drupal
CVE-2026-81161

3.3LOW

Key Information:

Vendor

Drupal
Status
Content Moderation Notifications
Vendor
CVE Published:
2 September 2026

What is CVE-2026-81161?

A vulnerability in Drupal's Content Moderation Notifications allows unauthorized users to escalate their privileges, compromising the integrity of the moderation process. This issue affects versions ranging from 0.0.0 to 3.9.0, making it crucial for users to update their systems to protect against potential exploitation.

Affected Version(s)

Content Moderation Notifications 0.0.0 < 3.9.0

References

https://www.drupal.org/sa-contrib-2026-107

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lee Rowlands (larowlan)
Luke Leber (luke.leber)
Brian Osborne (bkosborne)
Jonathan Hedstrom (jhedstrom)
Luke Leber (luke.leber)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Lee Rowlands (larowlan)
Juraj Nemec (poker10)
.