CVE-2026-15089 - vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest regis

CVE-2026-15087 - vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*.

CVE-2026-15086 - vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . This issue affects Raw Formatter

CVE-2026-11915 - vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack

CVE-2026-11914 - vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*.

CVE-2026-11913 - vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.

CVE-2026-58591 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-58590 - Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects

CVE-2026-58589 - Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects

CVE-2026-58588 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-58587 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-55810 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-55809 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-55808 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-55807 - Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Fo

CVE-2026-55806 - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Conte

CVE-2026-55804 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-55803 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-15085 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-15084 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-15083 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-15082 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-15081 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-15080 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Si

CVE-2026-15079 - Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allo

CVE-2026-13244 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-13243 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Salesforce Suite allows Cross Site Request

CVE-2026-13242 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-13241 - Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affect

CVE-2026-13240 - Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affect

CVE-2026-13239 - Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects Wi

CVE-2026-13238 - Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Br

CVE-2026-13237 - Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affec

CVE-2026-13236 - Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects

CVE-2026-13235 - Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.

CVE-2026-13234 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-13233 - Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Reques

CVE-2026-13232 - Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allow

CVE-2026-13231 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-12535 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-11909 - Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This

CVE-2026-11908 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-10770 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-10769 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-10768 - Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issu

CVE-2026-9726 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-6816 - An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users pe

CVE-2026-5343 - Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal SAML SSO - Service Prov

CVE-2026-4929 - Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper out

CVE-2026-4093 - In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter ren

CVE-2026-9082 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-8495 - Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affect

CVE-2026-8493 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-8492 - Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTransla

CVE-2026-8491 - Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions a

CVE-2026-6871 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-6367 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-6366 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup

CVE-2026-6365 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i

CVE-2026-6095 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i