Product
The Fasttoggle module for Drupal contains an authorization bypass vulnerability (CVE-2026-118569) allowing authenticated users with the "use fasttoggle" permission to modify the publication status, promotion, or stickiness of arbitrary nodes and comments without appropriate access checks.