CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-114526Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223Drupal Black Hole · drupal/black_hole
- CVE-2026-114525ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224Drupal ABC · drupal/abc
- CVE-2026-114524Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225Drupal Custom Formatters · drupal/custom_formatters
- CVE-2026-114529CSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226Drupal CSV Field · drupal/csv_field
- CVE-2026-114530Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227Drupal Dopup · drupal/dopup
- CVE-2026-114531Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228Drupal Swiper formatter · drupal/swiper_formatter
- CVE-2026-107260Sector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229Drupal Sector Distribution · drupal/sector
- CVE-2026-114532UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230Drupal UI Icons
- CVE-2026-114533Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231Drupal Ágora Transparency Theme · drupal/agora_theme
- CVE-2026-114534Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232Drupal Block Attributes · drupal/block_attributes
- CVE-2026-114535Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233Drupal Swiper formatter · drupal/swiper_formatter
- CVE-2026-114536USWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234Drupal USWDS Paragraph Components · drupal/uswds_paragraph_…
- CVE-2026-114537View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235Drupal View Unpublished
- CVE-2026-114538Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236Drupal Bootstrap
- CVE-2026-114539DocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237Drupal DocCheck Basic
- CVE-2026-114540Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238Drupal Domain · drupal/domain
- CVE-2026-114543Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239Drupal Simple User Management
- CVE-2026-114541Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240Drupal Frontend Editing · drupal/frontend_editing
- CVE-2026-114553Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241Drupal Frontend Editing · drupal/frontend_editing
- CVE-2026-114542Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242Drupal Simple OAuth (OAuth2) & OpenID Connect · drupal/simp…
- CVE-2026-114544Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243Drupal Media Bulk Upload · drupal/media_bulk_upload
- CVE-2026-114545Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244Drupal Fullcalendar View · drupal/fullcalendar_view
- CVE-2026-114546Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245Drupal Media Alias Display · drupal/media_alias_display
- CVE-2026-114547TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246Drupal TinyPNG · drupal/tinypng
- CVE-2026-114548ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247Drupal ImageAPI Optimize WebP · drupal/imageapi_optimize_we…
- CVE-2026-107256Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248Drupal Shield
- CVE-2026-114572Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249Drupal Domain Login Restrict
- CVE-2026-114555Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250Drupal Data field
- CVE-2026-114554AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251Drupal AI File to Text · drupal/ai_file_to_text
- CVE-2026-114571Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252Drupal Rabbit Hole