Vulnerabilidades en Drupal
576 resultadosCVE-2026-16644CRITICALWebform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087EPSS 0.4%CVE-2025-31691CRITICALOAuth2 Server - Moderately critical - Access bypass - SA-CONTRIB-2025-020EPSS 0.4%CVE-2025-31681CRITICALAuthenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009EPSS 0.4%CVE-2026-55809HIGHFlag attendance field - Critical - PHP object injection - SA-CONTRIB-2026-049EPSS 0.4%CVE-2026-13244HIGHTealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064EPSS 0.4%CVE-2026-55810HIGHPlotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050EPSS 0.4%CVE-2025-47707HIGHEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053EPSS 0.4%CVE-2022-25274MEDIUMDrupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated with existing permiEPSS 0.4%CVE-2024-13297MEDIUMEloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063EPSS 0.4%CVE-2026-96355CRITICALWebform - Critical - Remote Code Execution - SA-CONTRIB-2026-175EPSS 0.4%CVE-2026-0748MEDIUMAccess bypass in Drupal 7 i18n_node translation UIEPSS 0.4%CVE-2024-13280CRITICALPersistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044EPSS 0.4%CVE-2024-13295MEDIUMNode export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061EPSS 0.4%CVE-2024-13296MEDIUMMailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062EPSS 0.4%CVE-2026-18259HIGHToken Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090EPSS 0.4%CVE-2025-4416HIGHEvents Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059EPSS 0.4%CVE-2024-13256HIGHEmail Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020EPSS 0.4%CVE-2024-55634HIGHDrupal core - Moderately critical - Access bypass - SA-CORE-2024-004EPSS 0.4%CVE-2025-31686HIGHOpen Social - Less critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-015EPSS 0.4%CVE-2025-7030MEDIUMTwo-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085EPSS 0.4%