Vulnerabilities in Drupal

576 results
CVE-2025-7030MEDIUMTwo-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085EPSS 0.4%CVE-2026-108099HIGHEntity List - Critical - Remote code execution - SA-CONTRIB-2026-218EPSS 0.4%CVE-2026-96365HIGHWebform - Less critical - Denial of service - SA-CONTRIB-2026-170EPSS 0.4%CVE-2025-7717HIGHFile Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089EPSS 0.4%CVE-2026-96356MEDIUMWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-174EPSS 0.4%CVE-2026-1556MEDIUMInformation disclosure via file URI overwrite in File (Field) PathsEPSS 0.4%CVE-2026-15089CRITICALCommerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-079EPSS 0.4%CVE-2026-73475CRITICALCommerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095EPSS 0.4%CVE-2026-16645CRITICALPhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088EPSS 0.4%CVE-2025-31694HIGHTwo-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2025-023EPSS 0.4%CVE-2026-6366MEDIUMDrupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002EPSS 0.4%CVE-2026-96366MEDIUMWebform - Moderately critical - Access bypass - SA-CONTRIB-2026-169EPSS 0.4%CVE-2025-3903HIGHUEditor - 百度编辑器 - Critical - Unsupported - SA-CONTRIB-2025-044EPSS 0.4%CVE-2026-107249CRITICALBlock AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192EPSS 0.4%CVE-2025-31685CRITICALOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2025-014EPSS 0.4%CVE-2025-3474MEDIUMPanels - Critical - Access bypass - SA-CONTRIB-2025-033EPSS 0.4%CVE-2025-47710HIGHEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056EPSS 0.4%CVE-2024-13253CRITICALAdvanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017EPSS 0.4%CVE-2024-11942MEDIUMDrupal core - Moderately critical - Improper error handling - SA-CORE-2024-002EPSS 0.4%CVE-2024-13310MEDIUMGit Utilities for Drupal - Critical - Unsupported - SA-CONTRIB-2024-074EPSS 0.4%