CVE-2026-118584 — Field Permissions — Moderately Critical — Access Bypass — SA-CONTRIB-2026-289

The Drupal Field Permissions module contains an incorrect authorization vulnerability that may enable forceful browsing and viewing of data in “Private” fields on certain entity types.