CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-84918Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130Drupal Monobank payment API · drupal/monobank
- CVE-2026-84919PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131Drupal PhotoSwipe - Responsive JavaScript Modal Image Galle…
- CVE-2026-84920Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132Drupal Unpublished Node Permissions
- CVE-2026-84921Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133Drupal Webform Submissions Delete
- CVE-2026-87936amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134Drupal amazee.ai Private AI Provider · drupal/ai_provider_a…
- CVE-2026-87937Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135Drupal Central Authentication System (CAS) Server · drupal/…
- CVE-2026-87938CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136Drupal CSP log · drupal/csp_log
- CVE-2026-87939Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137Drupal Feed Block · drupal/feed_block
- CVE-2026-87940Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138Drupal Key auth · drupal/key_auth
- CVE-2026-87941Patreon - Critical - Unsupported - SA-CONTRIB-2026-139Drupal Patreon
- CVE-2026-87942SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140Drupal SafeDelete · drupal/safedelete
- CVE-2026-87943SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87944SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87945SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87946SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87947SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87948SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87949SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87950SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87951SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87952SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87953SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151Drupal SAML SSO - Service Provider · drupal/miniorange_saml
- CVE-2026-87954Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152Drupal Taxonomy Term Glossary · drupal/term_glossary
- CVE-2026-87955Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153Drupal Ultimate Table Field · drupal/ultimate_table_field
- CVE-2026-96360Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154Drupal Webform · drupal/webform
- CVE-2026-96361Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155Drupal Webform · drupal/webform
- CVE-2026-96358Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158Drupal Webform · drupal/webform
- CVE-2026-96359Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159Drupal Webform · drupal/webform
- CVE-2026-96362Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160Drupal Webform · drupal/webform
- CVE-2026-96363Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161Drupal Webform · drupal/webform