CVE-2026-55809: Flag Attendance Field Project Flag Attendance Field

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions: from 0.0.0 to 1.2.

Affected products

• Flag Attendance Field Project Flag Attendance Field: before 1.2 (fixed in 1.2)

Published 2026-07-10. Last modified 2026-07-14.