Vulnerabilities in Drupal

576 results
CVE-2026-73476MEDIUMExternal Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098EPSS 0.3%CVE-2026-107268MEDIUMTwo Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207EPSS 0.3%CVE-2026-76782HIGHScreenshot - Critical - Unsupported - SA-CONTRIB-2026-102EPSS 0.3%CVE-2026-76759HIGHScreenshot - Critical - Unsupported - SA-CONTRIB-2026-102EPSS 0.3%CVE-2024-13257MEDIUMCommerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021EPSS 0.3%CVE-2026-3216MEDIUMDrupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017EPSS 0.3%CVE-2026-84920MEDIUMUnpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132EPSS 0.3%CVE-2024-13289MEDIUMCookiebot + GTM - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-055EPSS 0.3%CVE-2026-87950MEDIUMSAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148EPSS 0.3%CVE-2026-96364MEDIUMWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-171EPSS 0.3%CVE-2026-87937MEDIUMCentral Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135EPSS 0.3%CVE-2026-15079MEDIUMLogin Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070EPSS 0.3%CVE-2025-47706MEDIUMEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052EPSS 0.3%CVE-2025-47705MEDIUMIFrame Remove Filter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-051EPSS 0.3%CVE-2025-8675MEDIUMAI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095EPSS 0.3%CVE-2025-13081MEDIUMDrupal core - Moderately critical - Gadget chain - SA-CORE-2025-006EPSS 0.3%CVE-2025-48444MEDIUMQuick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064EPSS 0.3%CVE-2025-48013MEDIUMQuick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-065EPSS 0.3%CVE-2026-96385MEDIUMREST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182EPSS 0.3%CVE-2024-13243MEDIUMEntity Delete Log - Moderately critical - Access bypass - SA-CONTRIB-2024-007EPSS 0.3%