Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-114572 |
medium | 5.4 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Lo | |
CVE-2026-114571 |
medium | 6.5 | 0.0024 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This | |
CVE-2026-114555 |
low | 3.5 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114554 |
medium | 4.3 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. | |
CVE-2026-114553 |
medium | 5.4 | 0.0021 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. | |
CVE-2026-114548 |
low | 3.7 | 0.0021 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI | |
CVE-2026-114547 |
low | 3.7 | 0.0020 | 2026-10-30 | Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue | |
CVE-2026-114546 |
low | 3.7 | 0.0021 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Al | |
CVE-2026-114545 |
medium | 5.4 | 0.0021 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing | |
CVE-2026-114544 |
medium | 5.4 | 0.0021 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing | |
CVE-2026-114543 |
medium | 6.3 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Bro | |
CVE-2026-114542 |
medium | 5.4 | 0.0018 | 2026-10-30 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple O | |
CVE-2026-114541 |
medium | 4.8 | 0.0011 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Si | |
CVE-2026-114540 |
medium | 6.3 | 0.0019 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issu | |
CVE-2026-114539 |
medium | 6.3 | 0.0024 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck | |
CVE-2026-114538 |
high | 7.1 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114537 |
medium | 5.3 | 0.0023 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. | |
CVE-2026-114536 |
medium | 6.5 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114535 |
medium | 5.3 | 0.0023 | 2026-10-30 | Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. T | |
CVE-2026-114534 |
medium | 5.9 | 0.0017 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114533 |
medium | 5.3 | 0.0023 | 2026-10-30 | Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Bro | |
CVE-2026-114532 |
medium | 6.5 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114531 |
medium | 6.5 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114530 |
medium | 5.3 | 0.0023 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue | |
CVE-2026-114529 |
medium | 6.5 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114528 |
high | 7.1 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114527 |
high | 7.1 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114526 |
high | 7.1 | 0.0019 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114525 |
high | 7.1 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-114524 |
high | 7.2 | 0.0032 | 2026-10-30 | Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Pri | |
CVE-2026-114523 |
critical | 9.8 | 0.0105 | 2026-10-30 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") | |
CVE-2026-110738 |
medium | 6.5 | 0.0016 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108515 |
medium | 6.5 | 0.0021 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108514 |
medium | 6.5 | 0.0021 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-108099 |
high | 8.1 | 0.0041 | 2026-10-30 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera | |
CVE-2026-108097 |
high | 8.1 | 0.0057 | 2026-10-30 | 3 PoC | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera |
CVE-2026-107312 |
medium | 4.3 | 0.0026 | 2026-10-30 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for | |
CVE-2026-107311 |
low | 3.7 | 0.0021 | 2026-10-30 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions b | |
CVE-2026-107310 |
medium | 4.3 | 0.0020 | 2026-10-30 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side | |
CVE-2026-107309 |
low | 3.7 | 0.0020 | 2026-10-30 | Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. Th | |
CVE-2026-107308 |
low | 3.1 | 0.0015 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107307 |
medium | 4.3 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. T | |
CVE-2026-107306 |
low | 3.8 | 0.0019 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107268 |
medium | 4.3 | 0.0029 | 2026-10-30 | 1 PoC | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authe |
CVE-2026-107267 |
medium | 5.3 | 0.0023 | 2026-10-30 | Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue af | |
CVE-2026-107266 |
medium | 5.3 | 0.0028 | 2026-10-30 | Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This i | |
CVE-2026-107265 |
medium | 5.4 | 0.0018 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107264 |
medium | 5.4 | 0.0018 | 2026-10-30 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Dru | |
CVE-2026-107263 |
medium | 5.4 | 0.0017 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This i | |
CVE-2026-107262 |
medium | 5.3 | 0.0012 | 2026-10-30 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross |