CVE-2026-13239PATCHED

drupal · wisski

WissKI - Critical - Access bypass - SA-CONTRIB-2026-059

Description

Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0.

Affected Products

Vendor	Product	Versions
drupal	wisski	0.0.0

References

https://www.drupal.org/sa-contrib-2026-059

Related News (2 articles)

Tier C

VulDB45d ago

CVE-2026-13239 | Drupal WissKI up to 4.2.0 Authorization missing authentication

→ No new info (linked only)

Tier B

BSI Advisories61d ago

[NEU] [mittel] Drupal: Mehrere Schwachstellen

→ No new info (linked only)

CVSS 3.16.5 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA KEV❌ No

Actively exploited❌ No

Patch available

4.2.0

CWECWE-862

PublishedJul 10, 2026

Last enriched45d agov2

Trending Score0

Source articles2

Independent2

Info Completeness8/14

Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2026-55803EXP

Drupal core - Critical - PHP object injection - SA-CORE-2026-005

Trending: 24

CRITICALPRE-CVE

Drupal Internationalization Single Sign-On Access Bypass

Trending: 1

CRITICALCVE-2026-11913

Mother May I - Critical - Unsupported - SA-CONTRIB-2026-045

Trending: 1

MEDIUMCVE-2026-15083EXP

ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074

LOWCVE-2026-55807EXP

Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 10, 2026

Discovered by ZDM

Jul 10, 2026

Updated: description, severity

Jul 11, 2026

Patch Available

Jul 13, 2026

Version History

Last enriched 45d ago

v2Tier C45d ago

Updated description with more technical detail, changed severity to HIGH, and corrected exploit availability status.

descriptionseverity

via VulDB

v146d ago

Initial creation