CVE-2026-118550CWE-525

CVE-2026-118550: falha em Drupal AI (Artificial Intelligence)

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

Publicada em

Seguir esta CVE+ Monitorar AI+ Monitorar drupal/ai

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.2%
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
Produtos afetados
Drupal · AI (Artificial Intelligence)
CVEs relacionadas — Drupal AI (Artificial Intelligence)

No mesmo produto, das mais perigosas para as menos.

CVE-2025-31692HIGHAI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021EPSS 0.8%CVE-2025-31693MEDIUMAI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022EPSS 0.8%CVE-2025-31678HIGHAI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004EPSS 0.4%CVE-2026-13234MEDIUMAI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054EPSS 0.3%CVE-2026-3573HIGHAI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028EPSS 0.2%CVE-2025-31677HIGHAI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003EPSS 0.2%