Search/CVE-2026-107251
● CVE

CVE-2026-107251

DiscoveredOct 30, 2026UpdatedOct 30, 2026

Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3.

View graph Watch Export
CVSS v3.1
—
EPSS
—%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Oct 30, 2026
Disclosure — published as a CVE record.