CVE-2026-55809 — HIGH (8.1)

Q: How severe is CVE-2026-55809?

CVE-2026-55809 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-55809?

Check the references section above for vendor advisories and patch information. Affected products include: Flag Attendance Field Project Flag Attendance Field.

Vulnerability Description

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions: from 0.0.0 to 1.2.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Flag Attendance Field Project	Flag Attendance Field	< 1.2

Related Weaknesses (CWE)

CWE-915

References

https://www.drupal.org/sa-contrib-2026-049Vendor Advisory

FAQ

What is CVE-2026-55809?

CVE-2026-55809 is a vulnerability with a CVSS score of 8.1 (HIGH). Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions:...

How severe is CVE-2026-55809?

CVE-2026-55809 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-55809?

Check the references section above for vendor advisories and patch information. Affected products include: Flag Attendance Field Project Flag Attendance Field.