CVE-2026-114524CWE-267

CVE-2026-114524: vulnerability in Drupal Custom Formatters

Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225

Published

Follow this CVE+ Monitor Custom Formatters+ Monitor drupal/custom_formatters

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.
Affected products
Drupal · Custom Formatters