Question 1

What is CVE-2026-107251 — CVE-2026-107251?

Accepted Answer

Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3.

Question 2

What is the authoritative source for CVE-2026-107251?

Accepted Answer

CVE-2026-107251 (CVE-2026-107251) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-107251CVE-2026-107251

Description

Scoring