Advisories · Technology

Drupal Entity Reference Manager (Merge entities).

Every CVE that names Drupal Entity Reference Manager (Merge entities) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107251 CVE record

CVSS 6.5 Medium

Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194
- Drupal Entity Reference Manager (Merge entities)
- Broken access control
Not analysed yet 30 Oct 2026