CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-107253Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196Drupal Orphans Media
- CVE-2026-107254Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197Drupal Authenticator Login Plus
- CVE-2026-107257Actstream - Critical - Access bypass - SA-CONTRIB-2026-198Drupal Actstream
- CVE-2026-107258Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199Drupal Inline Entity Form Dialog
- CVE-2026-107259Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200Drupal Linked Field
- CVE-2026-107261Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201Drupal Authenticator Login Plus
- CVE-2026-107263Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202Drupal Gutenberg
- CVE-2026-107264Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203Drupal Inline Formatter Field
- CVE-2026-107265Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204Drupal Leaflet
- CVE-2026-107266Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205Drupal Views Share · drupal/views_share
- CVE-2026-96389Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206Drupal Xray Audit
- CVE-2026-107268Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207Drupal Two Factor Authentication - TFA / Passwordless Login
- CVE-2026-107267DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208Drupal DKAN
- CVE-2026-107306Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209Drupal Menu Link Attributes
- CVE-2026-107307SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210Drupal SmartLinker AI
- CVE-2026-107308Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211Drupal Country
- CVE-2026-107309Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212Drupal Easy Breadcrumb
- CVE-2026-107310Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213Drupal Freelinking
- CVE-2026-107311Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214Drupal Permissions by Term
- CVE-2026-107312Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215Drupal Examples for Developers
- CVE-2026-107255Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216Drupal Restrict route by IP · drupal/restrict_route_by_ip
- CVE-2026-107262Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217Drupal Advanced Filesystem
- CVE-2026-108097Drupal core - Critical - Remote code execution - SA-CORE-2026-014Drupal core · drupal/core
- CVE-2026-110738Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219Drupal Gin Admin Theme · drupal/gin
- CVE-2026-108515Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015Drupal core · drupal/core
- CVE-2026-108514Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016Drupal core · drupal/core
- CVE-2026-108099Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218Drupal Entity List · drupal/entity_list
- CVE-2026-114523Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220Drupal Ffmpeg Image Toolkit · drupal/ffmpeg_image_toolkit
- CVE-2026-114527UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221Drupal UI Icons
- CVE-2026-114528Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222Drupal Zero Point · drupal/zeropoint