CVE-2026-76758: Vulnerability in Drupal Link content parser

CVE-2026-76758 describes a vulnerability in the Drupal Link content parser component. The vulnerability affects all versions of the Link content parser and is related to improper input validation (CWE-20). The CVSS 3.1 vector indicates that the vulnerability can be exploited remotely over the network (AV:N) but requires high attack complexity (AC:H) and high privileges (PR:H) without user interaction (UI:N). The impact includes high confidentiality and integrity loss but no availability impact. No official remediation or patch has been published as of the data provided.

The vulnerability allows an attacker with high privileges and remote network access to compromise confidentiality and integrity of the affected system. There is no impact on system availability. Exploitation requires high attack complexity and no user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Drupal security advisories for updates and consider restricting access to the Link content parser component to trusted users with appropriate privileges until a fix is available.