CVE-2026-13232

Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0.

Credits

Bill Seremetis (bserem)
Bill Seremetis (bserem)
Greg Knaddison (greggles)
Drew Webber (mcdruid)

References