CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-96367Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162Drupal Webform · drupal/webform
- CVE-2026-96368Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163Drupal Webform · drupal/webform
- CVE-2026-96370Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164Drupal Webform · drupal/webform
- CVE-2026-96369Webform - Less critical - Access bypass - SA-CONTRIB-2026-165Drupal Webform · drupal/webform
- CVE-2026-96371Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166Drupal Webform · drupal/webform
- CVE-2026-96372Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167Drupal Webform · drupal/webform
- CVE-2026-96373Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168Drupal Webform · drupal/webform
- CVE-2026-96366Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169Drupal Webform · drupal/webform
- CVE-2026-96365Webform - Less critical - Denial of service - SA-CONTRIB-2026-170Drupal Webform · drupal/webform
- CVE-2026-96364Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171Drupal Webform · drupal/webform
- CVE-2026-96357Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172Drupal Webform · drupal/webform
- CVE-2026-96398Webform - Less critical - Access bypass - SA-CONTRIB-2026-173Drupal Webform · drupal/webform
- CVE-2026-96356Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174Drupal Webform · drupal/webform
- CVE-2026-96355Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175Drupal Webform · drupal/webform
- CVE-2026-96375Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176Drupal Cloud · drupal/cloud
- CVE-2026-96376Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177Drupal Cloud · drupal/cloud
- CVE-2026-96374Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178Drupal Project Browser · drupal/project_browser
- CVE-2026-96378Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179Drupal Commerce Decoupled Checkout
- CVE-2026-96384Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180Drupal Mermaid Diagram Field · drupal/mermaid_diagram_field
- CVE-2026-96379CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181Drupal CookieCuttr · drupal/cookiecuttr
- CVE-2026-96385REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182REST & JSON API Authentication for Drupal · drupal/rest_api…
- CVE-2026-96387Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183Drupal Stop administrator login
- CVE-2026-96388Tawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184Drupal Tawk.to - Live chat application · drupal/tawk_to
- CVE-2026-96390Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185Drupal Editoria11y Accessibility Checker · drupal/editoria1…
- CVE-2026-96391Webform REST - Less critical - Access bypass - SA-CONTRIB-2026-186Drupal Webform REST · drupal/webform_rest
- CVE-2026-96392AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187Drupal AI CKEditor · drupal/ai_ckeditor
- CVE-2026-96377Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188Drupal Combined image style · drupal/combined_image_style
- CVE-2026-96380CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189Drupal CSS Usage Analyzer · drupal/css_usage_analyzer
- CVE-2026-96386Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190Drupal Smart Content · drupal/smart_content
- CVE-2026-96382Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191Drupal Diba carousel slider · drupal/diba_carousel