CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 13:56 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107258 New | DR Drupal Drupal | – | Oct 30 | Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199 |
| CVE-2026-107259 New | DR Drupal Drupal | – | Oct 30 | Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200 |
| CVE-2026-107261 New | DR Drupal Drupal | – | Oct 30 | Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201 |
| CVE-2026-107263 New | DR Drupal Drupal | – | Oct 30 | Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202 |
| CVE-2026-107264 New | DR Drupal Drupal | – | Oct 30 | Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203 |
| CVE-2026-107265 New | DR Drupal Drupal | – | Oct 30 | Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204 |
| CVE-2026-107266 New | DR Drupal Drupal | – | Oct 30 | Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205 |
| CVE-2026-96389 New | DR Drupal Drupal | – | Oct 30 | Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206 |
| CVE-2026-107268 New | DR Drupal Drupal | – | Oct 30 | Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207 |
| CVE-2026-107267 New | DR Drupal Drupal | – | Oct 30 | DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208 |
| CVE-2026-107306 New | DR Drupal Drupal | – | Oct 30 | Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209 |
| CVE-2026-107307 New | DR Drupal Drupal | – | Oct 30 | SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210 |
| CVE-2026-107308 New | DR Drupal Drupal | – | Oct 30 | Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211 |
| CVE-2026-107309 New | DR Drupal Drupal | – | Oct 30 | Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212 |
| CVE-2026-107310 New | DR Drupal Drupal | – | Oct 30 | Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213 |
| CVE-2026-107311 New | DR Drupal Drupal | – | Oct 30 | Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214 |
| CVE-2026-107312 New | DR Drupal Drupal | – | Oct 30 | Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215 |
| CVE-2026-107255 New | DR Drupal Drupal | – | Oct 30 | Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216 |
| CVE-2026-107262 New | DR Drupal Drupal | – | Oct 30 | Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217 |
| CVE-2026-108097 New | DR Drupal Drupal | – | Oct 30 | Drupal core - Critical - Remote code execution - SA-CORE-2026-014 |
| CVE-2026-110738 New | DR Drupal Drupal | – | Oct 30 | Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219 |
| CVE-2026-108515 New | DR Drupal Drupal | – | Oct 30 | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015 |
| CVE-2026-108514 New | DR Drupal Drupal | – | Oct 30 | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016 |
| CVE-2026-108099 New | DR Drupal Drupal | – | Oct 30 | Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218 |
| CVE-2026-114523 New | DR Drupal Drupal | – | Oct 30 | Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220 |
| CVE-2026-114527 New | DR Drupal Drupal | – | Oct 30 | UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221 |
| CVE-2026-114528 New | DR Drupal Drupal | – | Oct 30 | Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222 |
| CVE-2026-114526 New | DR Drupal Drupal | – | Oct 30 | Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223 |
| CVE-2026-114525 New | DR Drupal Drupal | – | Oct 30 | ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224 |
| CVE-2026-114524 New | DR Drupal Drupal | – | Oct 30 | Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225 |
| CVE-2026-114529 New | DR Drupal Drupal | – | Oct 30 | CSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226 |
| CVE-2026-114530 New | DR Drupal Drupal | – | Oct 30 | Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227 |
| CVE-2026-114531 New | DR Drupal Drupal | – | Oct 30 | Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228 |
| CVE-2026-107260 New | DR Drupal Drupal | – | Oct 30 | Sector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229 |
| CVE-2026-114532 New | DR Drupal Drupal | – | Oct 30 | UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230 |
| CVE-2026-114533 New | DR Drupal Drupal | – | Oct 30 | Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231 |
| CVE-2026-114534 New | DR Drupal Drupal | – | Oct 30 | Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232 |
| CVE-2026-114535 New | DR Drupal Drupal | – | Oct 30 | Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233 |
| CVE-2026-114536 New | DR Drupal Drupal | – | Oct 30 | USWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234 |
| CVE-2026-114537 New | DR Drupal Drupal | – | Oct 30 | View Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235 |
| CVE-2026-114538 New | DR Drupal Drupal | – | Oct 30 | Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236 |
| CVE-2026-114539 New | DR Drupal Drupal | – | Oct 30 | DocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237 |
| CVE-2026-114540 New | DR Drupal Drupal | – | Oct 30 | Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238 |
| CVE-2026-114543 New | DR Drupal Drupal | – | Oct 30 | Simple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239 |
| CVE-2026-114541 New | DR Drupal Drupal | – | Oct 30 | Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240 |
| CVE-2026-114553 New | DR Drupal Drupal | – | Oct 30 | Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241 |
| CVE-2026-114542 New | DR Drupal Drupal | – | Oct 30 | Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242 |
| CVE-2026-114544 New | DR Drupal Drupal | – | Oct 30 | Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243 |
| CVE-2026-114545 New | DR Drupal Drupal | – | Oct 30 | Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244 |
| CVE-2026-114546 New | DR Drupal Drupal | – | Oct 30 | Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245 |