CVE-2026-96380: CWE-862 Missing Authorization in Drupal CSS Usage Analyzer

The vulnerability identified as CVE-2026-96380 affects the Drupal CSS Usage Analyzer module. It is classified under CWE-862 (Missing Authorization), meaning the module does not properly enforce access controls. Specifically, versions from 1.0.0 up to but not including 1.0.2 are affected. This allows an attacker to bypass authorization checks and access functionality or resources they should not be able to, through forceful browsing techniques. No CVSS score is provided, and there is no indication of known exploits in the wild or vendor-provided patches.

The impact of this vulnerability is unauthorized access to functionality or data within the CSS Usage Analyzer module due to missing authorization controls. This could lead to information disclosure or unauthorized actions within the scope of the module. There is no evidence of active exploitation or broader system compromise from the provided data.

No official patch or remediation information is provided in the input data. Patch status is not yet confirmed — check the Drupal vendor advisory for current remediation guidance. Until a fix is available, restrict access to the CSS Usage Analyzer module to trusted users only and monitor for unusual access attempts related to this module.