Drupal vulnerabilities
576 CVEs and advisories name Drupal as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-84920Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132
- CVE-2026-84921Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133
- CVE-2026-87936amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134
- CVE-2026-87937Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135
- CVE-2026-87938CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136
- CVE-2026-87939Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137
- CVE-2026-87940Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138
- CVE-2026-87941Patreon - Critical - Unsupported - SA-CONTRIB-2026-139
- CVE-2026-87942SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140
- CVE-2026-87943SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141
- CVE-2026-87944SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
- CVE-2026-87945SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143
- CVE-2026-87946SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144
- CVE-2026-87947SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145
- CVE-2026-87948SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146
- CVE-2026-87949SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147
- CVE-2026-87950SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148
- CVE-2026-87951SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149
- CVE-2026-87952SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150
- CVE-2026-87953SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151
- CVE-2026-87954Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152
- CVE-2026-87955Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153
- CVE-2026-96360Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154
- CVE-2026-96361Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155
- CVE-2026-96358Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
- CVE-2026-96359Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
- CVE-2026-96362Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
- CVE-2026-96363Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161
- CVE-2026-96367Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162
- CVE-2026-96368Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163