CVE-2026-16647 MEDIUM 4.1 Disable Login Page — Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Fun… 2026-09-02 CVE-2026-18986 MEDIUM 4.8 Entity Browser — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal E… 2026-09-02 CVE-2026-73474 MEDIUM 5.3 Entity Share Websub — Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forg… 2026-09-02 CVE-2026-73475 CRITICAL 9.1 Commerce Paypal — Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects C… 2026-09-02 CVE-2026-73476 MEDIUM 5.4 External Authentication — Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalat… 2026-09-02 CVE-2026-73477 MEDIUM 5.3 Quick Tabs — Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick … 2026-09-02 CVE-2026-73478 MEDIUM 5.3 Diff — Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff version… 2026-09-02 CVE-2026-76755 MEDIUM 5.9 Gammu Sms Daemon — Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. 2026-09-02 CVE-2026-76756 MEDIUM 5.9 Gammu Sms Daemon — Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. 2026-09-02 CVE-2026-76757 MEDIUM 5.9 Gammu Sms Daemon — Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*. 2026-09-02 CVE-2026-76758 MEDIUM 5.9 Link Content Parser — Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*. 2026-09-02 CVE-2026-76759 HIGH 7.3 Screenshot — Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*. 2026-09-02 CVE-2026-76782 HIGH 7.3 Screenshot — Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*. 2026-09-02 CVE-2026-81158 MEDIUM 5.3 Entity Api — Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity… 2026-09-02 CVE-2026-81159 LOW 3.7 Commerce Cybersource — Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affe… 2026-09-02 CVE-2026-81160 MEDIUM 6.1 Slick Carousel — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal S… 2026-09-02 CVE-2026-81161 LOW 3.3 Content Moderation Notifications — Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privileg… 2026-09-02 CVE-2026-81162 MEDIUM 5.3 Dxpr Builder: The Best Editing (Ai) Experience For Drupal — Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) … 2026-09-02 CVE-2026-81164 MEDIUM 5.4 Entity Pdf — Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity P… 2026-09-02 CVE-2026-81165 MEDIUM 5.3 Blazy — Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versi… 2026-09-02 CVE-2026-81166 MEDIUM 5.3 Digital Signage Framework — Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue a… 2026-09-02 CVE-2026-81167 MEDIUM 4.8 Address Suggestion — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal A… 2026-09-02 CVE-2026-81168 LOW 3.7 Captcha Protected Page — Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows… 2026-09-02 CVE-2026-81201 MEDIUM 6.1 Monster Menus — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal M… 2026-09-02 CVE-2026-81205 MEDIUM 5.3 Ldap / Active Directory Integration — Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal L… 2026-09-02 CVE-2026-81269 MEDIUM 5.3 Data Field — Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data fie… 2026-09-02 CVE-2026-15088 MEDIUM 5.7 Development Environment — Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*. 2026-08-25 CVE-2026-15916 MEDIUM 4.2 Drupal Core — Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal … 2026-08-25 CVE-2026-15917 MEDIUM 4.7 Drupal Core — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal D… 2026-08-25 CVE-2026-16638 MEDIUM 6.1 Media Folders — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal M… 2026-08-25 CVE-2026-16639 CRITICAL 9.8 Internationalization Single Sign On — Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single S… 2026-08-25 CVE-2026-16640 MEDIUM 6.1 Search Api Autocomplete — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal S… 2026-08-25 CVE-2026-16641 CRITICAL 9.8 Commerce Elavon — Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*. 2026-08-25 CVE-2026-16642 MEDIUM 5.7 Email Login Otp — Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*. 2026-08-25 CVE-2026-16643 MEDIUM 5.7 Lunr Exposed Filters — Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*. 2026-08-25 CVE-2026-16644 CRITICAL 9.1 Webform Rest — Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webf… 2026-08-25 CVE-2026-16645 CRITICAL 9.1 Photoswipe Responsive Javascript Modal Image Gallery — Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Fo… 2026-08-25 CVE-2026-16646 MEDIUM 5.7 Pankm — Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*. 2026-08-25 CVE-2026-18259 HIGH 7.5 Token Content Access — Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affe… 2026-08-25 CVE-2026-18260 MEDIUM 5.7 Disable Login Page — Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Br… 2026-08-25 CVE-2026-18261 MEDIUM 5.7 Powerful Surveys — Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*. 2026-08-25 CVE-2026-18985 HIGH 8.1 Edit In Place Field — Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affec… 2026-08-25 CVE-2026-55805 MEDIUM 5.4 Drupal Core — Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal D… 2026-08-25