drupal

Top products

The 15 most recently published vulnerabilities affecting drupal.

• CVE-2026-11913Mother May I - Critical - Unsupported - SA-CONTRIB-2026-0459.8Jul 10, 2026
• CVE-2026-11914Composer - Critical - Unsupported - SA-CONTRIB-2026-0465.9Jul 10, 2026
• CVE-2026-11915Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-0475.9Jul 10, 2026
• CVE-2026-15087Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-0785.9Jul 10, 2026
• CVE-2026-15086Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-0775.9Jul 10, 2026
• CVE-2026-15089Commerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-0799.1Jul 10, 2026
• CVE-2026-55808Drupal core - Moderately critical - Improper validation - SA-CORE-2026-0095.4Jul 10, 2026
• CVE-2026-55807Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-0083.1Jul 10, 2026
• CVE-2026-55806Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-0075.9Jul 10, 2026
• CVE-2026-55804Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-0065.9Jul 10, 2026
• CVE-2026-55803Drupal core - Critical - PHP object injection - SA-CORE-2026-0055.9Jul 10, 2026
• CVE-2026-15085AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-0765.4Jul 10, 2026
• CVE-2026-15084UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-0755.4Jul 10, 2026
• CVE-2026-15083ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-0744.2Jul 10, 2026
• CVE-2026-15082Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-0735.4Jul 10, 2026