Description An improper access check allows unauthorized users to access workflow stage and transition information. Remediation References CVE-2026-48955 Related Vulnerabilities Drupal Incorrect Authorization Vulnerability (CVE-2011-2726) MySQL CVE-2012-3156 Vulnerability (CVE-2012-3156) WebLogic CVE-2020-2801 Vulnerability (CVE-2020-2801) WordPress Plugin SecuPress Pro Security Bypass (1.4.12) Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.9) Severity Medium Classification CVE-2026-48955 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities