CVE-2026-96390: CWE-267 Privilege Defined With Unsafe Actions in Drupal Editoria11y Accessibility Checker

This vulnerability, identified as CWE-267, involves a privilege defined with unsafe actions in the Drupal Editoria11y Accessibility Checker module. This flaw allows an attacker to escalate privileges improperly. The affected versions are >=0.0.0 <2.2.23 and >=3.0.0 <3.0.9. No CVSS score or detailed exploit information is provided, and no known exploits are reported in the wild. No patch or remediation details are included in the provided data.

The vulnerability allows privilege escalation, which can enable an attacker to gain higher-level permissions than intended. This can lead to unauthorized actions within the Drupal environment using the Editoria11y Accessibility Checker module. No further impact details or exploitation reports are available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Drupal security advisories for updates and consider restricting access to the affected module until a fix is available.