PULSE
ES
FEED
ransomsilentransomgroup reclama a Susman Godfrey LLP · US · Professional Servicesransomglobal secret group reclama a TDS Telecommunications LLC. · US · Energy & Utilitiesransomshiba reclama a IT Foods Industries · Agriculture and Food Productionransomshiba reclama a Friendly Senior Living · Healthcareransomshiba reclama a Morgan White Group · Professional Servicesransomshiba reclama a Antwerp House Dentistry · GB · Healthcareransomeverstake reclama a as*****g.comransomeverstake reclama a ca*****s.comransomeverstake reclama a in*****s.comransomeverstake reclama a corp-smart.com · Technologyransomwhitearmor reclama a rolly.io · Technologyransomemperador reclama a LA PROFUMERIA SRL · IT · Retail & E-Commerceransomscarlettgroup reclama a sunnybrook.ca · CA · Healthcareransomscarlettgroup reclama a au.bank.in · IN · Financial Servicesransomsilentransomgroup reclama a Susman Godfrey LLP · US · Professional Servicesransomglobal secret group reclama a TDS Telecommunications LLC. · US · Energy & Utilitiesransomshiba reclama a IT Foods Industries · Agriculture and Food Productionransomshiba reclama a Friendly Senior Living · Healthcareransomshiba reclama a Morgan White Group · Professional Servicesransomshiba reclama a Antwerp House Dentistry · GB · Healthcareransomeverstake reclama a as*****g.comransomeverstake reclama a ca*****s.comransomeverstake reclama a in*****s.comransomeverstake reclama a corp-smart.com · Technologyransomwhitearmor reclama a rolly.io · Technologyransomemperador reclama a LA PROFUMERIA SRL · IT · Retail & E-Commerceransomscarlettgroup reclama a sunnybrook.ca · CA · Healthcareransomscarlettgroup reclama a au.bank.in · IN · Financial Services
← All CVEs
CVE WatchOct 30, 2026

CVE-2026-114535

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 30, 2026 · Last modified: Oct 30, 2026 · CWE-862

EPSS · 30d

Not enough EPSS history yet.

Technical description

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-96389—
—
———Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from 0.0.0 to 1.6.3, from 2.0.0 to 2.0.4, from 3.0.0 to 3.1.1.7hCVE-2026-118573—
—
———Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to 1.2.0.7hCVE-2026-118539—
—
———Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.7hCVE-2026-114547—
—
———Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2.7hCVE-2026-114533—
—
———Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3.7hCVE-2026-107309—
—
———Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11.7h