CVE-2026-118568CWE-922

CVE-2026-118568: vulnerability in Drupal Content Sync (content-sync.io)

Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291

Published

Follow this CVE+ Monitor Content Sync+ Monitor drupal/cms_content_sync

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.
Affected products
Drupal · Content Sync (content-sync.io)