drupal Entity API vulnerabilities

Latest drupal Entity API CVEs

Newest publication first

1. CVE-2026-81158 Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113

   Published 2026-09-02

   Medium·CVSS 5.3 EPSS 0.31%

   Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.