DR
Vendor
Drupal
707
CVEs
8
On KEV
72
New 30D
Products
DR9.8
Drupal
CMS
520 CVEs8 on KEV72 new
PI–
Project Issue Tracking Module
Drupal
6 CVEs0 on KEV0 new
PR–
Print
Drupal
5 CVEs0 on KEV0 new
AM–
Aggregation Module
Drupal
4 CVEs0 on KEV0 new
EV–
Everyblog
Drupal
4 CVEs0 on KEV0 new
PR–
Project
Drupal
4 CVEs0 on KEV0 new
UM–
Ubercart Module
Drupal
4 CVEs0 on KEV0 new
CC–
Content Construction Kit
Drupal
3 CVEs0 on KEV0 new
DP–
Drupal Project Issue Tracking
Drupal
3 CVEs0 on KEV0 new
SH–
Shindig-integrator
Drupal
3 CVEs0 on KEV0 new
AC8.8
Activity
Drupal
2 CVEs0 on KEV0 new
AC–
Ajax Checklist
Drupal
2 CVEs0 on KEV0 new
BM–
Bibliography Module
Drupal
2 CVEs0 on KEV0 new
BG–
Brilliant Gallery
Drupal
2 CVEs0 on KEV0 new
CM–
Chatroom Module
Drupal
2 CVEs0 on KEV0 new
CC8.6
Cookies Consent Management
Drupal
2 CVEs0 on KEV0 new
CS–
Custom Search Module
Drupal
2 CVEs0 on KEV0 new
DA9.8
Data
Drupal
2 CVEs0 on KEV0 new
DA–
Database Administration Module
Drupal
2 CVEs0 on KEV0 new
DE–
Drupal Easylinks Module
Drupal
2 CVEs0 on KEV0 new
HT–
Help Tip Module
Drupal
2 CVEs0 on KEV0 new
IM–
Imce Module
Drupal
2 CVEs0 on KEV0 new
LC–
Localization Client
Drupal
2 CVEs0 on KEV0 new
LM–
Logintoboggan Module
Drupal
2 CVEs0 on KEV0 new
SS–
Secure Site Module
Drupal
2 CVEs0 on KEV0 new
TA–
Talk
Drupal
2 CVEs0 on KEV0 new
TA–
Taxonomy Autotagger Module
Drupal
2 CVEs0 on KEV0 new
TM–
Trailscout Module
Drupal
2 CVEs0 on KEV0 new
UK–
User Karma Module
Drupal
2 CVEs0 on KEV0 new
VI–
Views
Drupal
2 CVEs0 on KEV0 new
AC–
Acidfree
Drupal
1 CVEs0 on KEV0 new
AM–
Archive Module
Drupal
1 CVEs0 on KEV0 new
AF–
Asin Field Module
Drupal
1 CVEs0 on KEV0 new
AM–
Atom Module
Drupal
1 CVEs0 on KEV0 new
AM–
Audio Module
Drupal
1 CVEs0 on KEV0 new
AU6.5
Authenticated User Page Caching
Drupal
1 CVEs0 on KEV0 new
AU7.5
Avatar Uploader
Drupal
1 CVEs0 on KEV0 new
BL–
Bluemasters
Drupal
1 CVEs0 on KEV0 new
BU–
Bueditor
Drupal
1 CVEs0 on KEV0 new
CC–
Cck Comment Reference
Drupal
1 CVEs0 on KEV0 new
CM–
Comment Mail
Drupal
1 CVEs0 on KEV0 new
CU–
Comment Upload Module
Drupal
1 CVEs0 on KEV0 new
CO–
Commons
Drupal
1 CVEs0 on KEV0 new
CF–
Context Form Alteration Module
Drupal
1 CVEs0 on KEV0 new
CM–
Cvs Management And Tracker
Drupal
1 CVEs0 on KEV0 new
DM–
Devel Module
Drupal
1 CVEs0 on KEV0 new
DF–
Doubleclick For Publishers
Drupal
1 CVEs0 on KEV0 new
DD9.8
Drupal Docker Images
Drupal
1 CVEs0 on KEV0 new
DE–
Drupal E-commerce Module
Drupal
1 CVEs0 on KEV0 new
DM–
Drupal Mysite
Drupal
1 CVEs0 on KEV0 new
DP–
Drupal Pathauto Module
Drupal
1 CVEs0 on KEV0 new
DP–
Drupal Project
Drupal
1 CVEs0 on KEV0 new
DP–
Drupal Pubcookie Module
Drupal
1 CVEs0 on KEV0 new
DU–
Drupal Userreview Module
Drupal
1 CVEs0 on KEV0 new
EM–
E-commerce Module
Drupal
1 CVEs0 on KEV0 new
EP–
E-publish
Drupal
1 CVEs0 on KEV0 new
EC5.4
Eca:event - Condition - Action
Drupal
1 CVEs0 on KEV0 new
EE6.1
Entity Embed
Drupal
1 CVEs0 on KEV0 new
ET–
Extended Tracker
Drupal
1 CVEs0 on KEV0 new
FA–
Faq
Drupal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84910 New | DR Drupal Drupal | 4.2 | Oct 22 | Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118 |
| CVE-2026-84911 New | DR Drupal Drupal | 3.1 | Oct 22 | AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119 |
| CVE-2026-84912 New | DR Drupal Drupal | 4.6 | Oct 22 | AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120 |
| CVE-2026-84913 New | DR Drupal Drupal | 4.6 | Oct 22 | AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121 |
| CVE-2026-84914 New | DR Drupal Drupal | 5.3 | Oct 22 | Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122 |
| CVE-2026-84915 New | DR Drupal Drupal | 4.6 | Oct 22 | Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123 |
| CVE-2026-84923 New | DR Drupal Drupal | 6.5 | Oct 22 | Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124 |
| CVE-2026-84924 New | DR Drupal Drupal | 5.4 | Oct 22 | Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125 |
| CVE-2026-84916 New | DR Drupal Drupal | 3.7 | Oct 22 | Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126 |
| CVE-2026-84917 New | DR Drupal Drupal | 6.5 | Oct 22 | Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127 |
| CVE-2026-16648 New | DR Drupal Drupal | 3.8 | Oct 22 | Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128 |
| CVE-2026-81163 New | DR Drupal Drupal | 5.4 | Oct 22 | Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129 |
| CVE-2026-84918 New | DR Drupal Drupal | 3.7 | Oct 22 | Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130 |
| CVE-2026-84919 New | DR Drupal Drupal | 4.6 | Oct 22 | PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131 |
| CVE-2026-84920 New | DR Drupal Drupal | 5.3 | Oct 22 | Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132 |
| CVE-2026-84921 New | DR Drupal Drupal | 5.3 | Oct 22 | Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133 |
| CVE-2026-87936 New | DR Drupal Drupal | 6.5 | Oct 22 | amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134 |
| CVE-2026-87937 New | DR Drupal Drupal | 6.5 | Oct 22 | Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135 |
| CVE-2026-87938 New | DR Drupal Drupal | – | Oct 22 | CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136 |
| CVE-2026-87939 New | DR Drupal Drupal | 4.2 | Oct 22 | Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137 |
| CVE-2026-87940 New | DR Drupal Drupal | 5.4 | Oct 22 | Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138 |
| CVE-2026-87941 New | DR Drupal Drupal | – | Oct 22 | Patreon - Critical - Unsupported - SA-CONTRIB-2026-139 |
| CVE-2026-87942 New | DR Drupal Drupal | 4.6 | Oct 22 | SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140 |
| CVE-2026-87943 New | DR Drupal Drupal | 6.5 | Oct 22 | SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141 |
| CVE-2026-87944 New | DR Drupal Drupal | 4.8 | Oct 22 | SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142 |
| CVE-2026-87945 New | DR Drupal Drupal | 5.4 | Oct 22 | SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143 |
| CVE-2026-87946 New | DR Drupal Drupal | 4.8 | Oct 22 | SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144 |
| CVE-2026-87947 New | DR Drupal Drupal | 4.8 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145 |
| CVE-2026-87948 New | DR Drupal Drupal | 3.5 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146 |
| CVE-2026-87949 New | DR Drupal Drupal | 3.3 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147 |
| CVE-2026-87950 New | DR Drupal Drupal | 5.3 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148 |
| CVE-2026-87951 New | DR Drupal Drupal | 3.8 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149 |
| CVE-2026-87952 New | DR Drupal Drupal | 3.1 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150 |
| CVE-2026-87953 New | DR Drupal Drupal | 3.3 | Oct 22 | SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151 |
| CVE-2026-87954 New | DR Drupal Drupal | 4.3 | Oct 22 | Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152 |
| CVE-2026-87955 New | DR Drupal Drupal | 4.3 | Oct 22 | Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153 |
| CVE-2026-96360 New | DR Drupal Drupal | 3.5 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154 |
| CVE-2026-96361 New | DR Drupal Drupal | 4.6 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155 |
| CVE-2026-96358 New | DR Drupal Drupal | 4.6 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158 |
| CVE-2026-96359 New | DR Drupal Drupal | 4.6 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159 |
| CVE-2026-96362 New | DR Drupal Drupal | 4.2 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160 |
| CVE-2026-96363 New | DR Drupal Drupal | – | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161 |
| CVE-2026-96367 New | DR Drupal Drupal | 4.6 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162 |
| CVE-2026-96368 New | DR Drupal Drupal | 4.6 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163 |
| CVE-2026-96370 New | DR Drupal Drupal | 5.4 | Oct 22 | Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164 |
| CVE-2026-96369 New | DR Drupal Drupal | 3.1 | Oct 22 | Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 |
| CVE-2026-96371 New | DR Drupal Drupal | 5.4 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166 |
| CVE-2026-96372 New | DR Drupal Drupal | 5.4 | Oct 22 | Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167 |
| CVE-2026-96373 New | DR Drupal Drupal | 3.3 | Oct 22 | Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168 |
| CVE-2026-96366 New | DR Drupal Drupal | 5.3 | Oct 22 | Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169 |
| CVE-2026-96365 New | DR Drupal Drupal | 7.5 | Oct 22 | Webform - Less critical - Denial of service - SA-CONTRIB-2026-170 |
| CVE-2026-96364 New | DR Drupal Drupal | 5.3 | Oct 22 | Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171 |
| CVE-2026-96357 New | DR Drupal Drupal | 4.6 | Oct 22 | Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172 |
| CVE-2026-96398 New | DR Drupal Drupal | 4.3 | Oct 22 | Webform - Less critical - Access bypass - SA-CONTRIB-2026-173 |
| CVE-2026-96356 New | DR Drupal Drupal | 5.3 | Oct 22 | Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174 |
| CVE-2026-96355 New | DR Drupal Drupal | 9.1 | Oct 22 | Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175 |
| CVE-2026-96375 New | DR Drupal Drupal | 4.8 | Oct 22 | Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176 |
| CVE-2026-96376 New | DR Drupal Drupal | 6.4 | Oct 22 | Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177 |
| CVE-2026-96374 New | DR Drupal Drupal | 4.2 | Oct 22 | Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178 |
| CVE-2026-96378 New | DR Drupal Drupal | 4.3 | Oct 22 | Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179 |
