Vulnerabilities in Drupal

576 results
CVE-2026-73478MEDIUMDiff - Moderately critical - Access bypass - SA-CONTRIB-2026-096EPSS 0.3%CVE-2026-81165MEDIUMBlazy - Less critical - Access bypass - SA-CONTRIB-2026-104EPSS 0.3%CVE-2025-14840HIGHHTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126EPSS 0.3%CVE-2026-87941MEDIUMPatreon - Critical - Unsupported - SA-CONTRIB-2026-139EPSS 0.3%CVE-2024-13312MEDIUMOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076EPSS 0.3%CVE-2024-13290MEDIUMOhDear Integration - Moderately critical - Access bypass - SA-CONTRIB-2024-056EPSS 0.3%CVE-2025-3057MEDIUMDrupal core - Critical - Cross site scripting - SA-CORE-2025-001EPSS 0.3%CVE-2024-13303MEDIUMDownload All Files - Critical - Access bypass - SA-CONTRIB-2024-069EPSS 0.3%CVE-2024-13302MEDIUMPages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068EPSS 0.3%CVE-2026-15087MEDIUMClean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078EPSS 0.3%CVE-2026-11915MEDIUMBrute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047EPSS 0.3%CVE-2026-84923MEDIUMEmail Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124EPSS 0.3%CVE-2025-9954HIGHAcquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105EPSS 0.3%CVE-2025-12082HIGHCivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112EPSS 0.3%CVE-2025-3904HIGHSportsleague - Critical - Unsupported - SA-CONTRIB-2025-045EPSS 0.3%CVE-2025-10929MEDIUMReverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111EPSS 0.3%CVE-2026-118561HIGHSingle Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274EPSS 0.3%CVE-2026-118565HIGHGroupEx PRO ( Daxko ) integration - Critical - Unsupported - SA-CONTRIB-2026-278EPSS 0.3%CVE-2026-96391MEDIUMWebform REST - Less critical - Access bypass - SA-CONTRIB-2026-186EPSS 0.3%CVE-2025-8361HIGHConfig Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093EPSS 0.3%