CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-114573Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253Drupal Monster Menus · drupal/monster_menus
- CVE-2026-118539Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254Drupal Commerce Core · drupal/commerce
- CVE-2026-118540Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255Drupal Commerce Core · drupal/commerce
- CVE-2026-118541Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256Drupal Commerce Core · drupal/commerce
- CVE-2026-118542Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257Drupal Commerce Core · drupal/commerce
- CVE-2026-118543Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258Drupal Commerce Core · drupal/commerce
- CVE-2026-118544Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259Drupal Commerce Core · drupal/commerce
- CVE-2026-118555Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260Drupal Commerce License · drupal/commerce_license
- CVE-2026-118556Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261Drupal Commerce Shipping · drupal/commerce_shipping
- CVE-2026-118557Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262Drupal Commerce Shipping · drupal/commerce_shipping
- CVE-2026-118558Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263Drupal Commerce Stripe · drupal/commerce_stripe
- CVE-2026-118559Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264Drupal Commerce Stripe · drupal/commerce_stripe
- CVE-2026-118560Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265Drupal Commerce Stripe · drupal/commerce_stripe
- CVE-2026-118545AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266Drupal AI · drupal/ai
- CVE-2026-118546AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267Drupal AI · drupal/ai
- CVE-2026-118548AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268Drupal AI · drupal/ai
- CVE-2026-118549AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269Drupal AI · drupal/ai
- CVE-2026-118550AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270Drupal AI · drupal/ai
- CVE-2026-118551AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271Drupal AI · drupal/ai
- CVE-2026-118552AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272Drupal AI · drupal/ai
- CVE-2026-118553AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273Drupal AI · drupal/ai
- CVE-2026-118561Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274Drupal Single Content Sync · drupal/single_content_sync
- CVE-2026-118562Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275Drupal Single Content Sync · drupal/single_content_sync
- CVE-2026-118563CacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276Drupal CacheFlush · drupal/cacheflush
- CVE-2026-118564PayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277PayUmoney for Drupal Commerce · drupal/commerce_payumoney
- CVE-2026-118565GroupEx PRO ( Daxko ) integration - Critical - Unsupported - SA-CONTRIB-2026-278Drupal GroupEx PRO ( Daxko ) integration · drupal/groupexp…
- CVE-2026-118582CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281Drupal CAPTCHA · drupal/captcha
- CVE-2026-118569Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282Drupal Fasttoggle · drupal/fasttoggle
- CVE-2026-118570Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283Drupal Fasttoggle · drupal/fasttoggle
- CVE-2026-118574S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279Drupal S3 File System · drupal/s3fs