Products
CMS & websites
Drupal
- Last 30 days
- 3
- Actively exploited (KEV)
- 4
- All CVEs
- 73
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-108097 | 8.1High |
Drupal core
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
|
0.57% |
2026-10-30
11 d ago
|
| CVE-2026-108515 | 6.5Medium |
Drupal core
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
|
0.21% |
2026-10-30
11 d ago
|
| CVE-2026-108514 | 6.5Medium |
Drupal core
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016
|
0.21% |
2026-10-30
11 d ago
|
| CVE-2026-15916 | 4.2Medium |
Drupal core
Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010
|
0.19% |
2026-08-26
2 mo ago
|
| CVE-2026-15917 | 4.7Medium |
Drupal core
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
|
0.2% |
2026-08-26
2 mo ago
|
| CVE-2026-55805 | 5.4Medium |
Drupal core
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
|
0.22% |
2026-08-26
2 mo ago
|
| CVE-2026-55808 | 5.4Medium |
Drupal core
Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009
|
0.27% |
2026-07-11
4 mo ago
|
| CVE-2026-55807 | 3.1Low |
Drupal core
Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008
|
0.22% |
2026-07-11
4 mo ago
|
| CVE-2026-55806 | 5.9Medium |
Drupal core
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
|
0.33% |
2026-07-11
4 mo ago
|
| CVE-2026-55804 | 5.9Medium |
Drupal core
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
|
0.35% |
2026-07-11
4 mo ago
|
| CVE-2026-55803 | 5.9Medium |
Drupal core
Drupal core - Critical - PHP object injection - SA-CORE-2026-005
|
0.35% |
2026-07-11
4 mo ago
|
|
CVE-2026-9082
KEV
|
9.8Critical |
Drupal core
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
|
89.38% |
2026-05-20
5 mo ago
|
| CVE-2026-6367 | 6.1Medium |
Drupal core
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003
|
0.2% |
2026-05-20
5 mo ago
|
| CVE-2026-6366 | 6.6Medium |
Drupal core
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
|
0.39% |
2026-05-20
5 mo ago
|
| CVE-2026-6365 | 6.1Medium |
Drupal core
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
|
0.21% |
2026-05-20
5 mo ago
|
| CVE-2026-0749 | 4.8Medium |
Drupal Drupal
Cross-Site Scripting Vulnerability in Drupal Form Builder Module
|
0.23% |
2026-01-28
9 mo ago
|
| CVE-2025-12848 | 7.0High |
Drupal Drupal
XSS vulnerability when rendering filename in Webform Multiform
|
0.35% |
2025-11-26
11 mo ago
|
| CVE-2025-13083 | 3.7Low |
Drupal core
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
|
0.27% |
2025-11-18
11 mo ago
|
| CVE-2025-13082 | 4.3Medium |
Drupal core
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
|
0.24% |
2025-11-18
11 mo ago
|
| CVE-2025-13081 | 5.9Medium |
Drupal core
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
|
0.28% |
2025-11-18
11 mo ago
|
| CVE-2025-13080 | 5.3Medium |
Drupal core
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
|
0.34% |
2025-11-18
11 mo ago
|
| CVE-2025-31675 | 5.4Medium |
Drupal coreDrupal Link
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
|
0.5% |
2025-04-01
19 mo ago
|
| CVE-2025-31674 | 7.5High |
Drupal core
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003
|
0.59% |
2025-04-01
19 mo ago
|
| CVE-2025-31673 | 4.6Medium |
Drupal core
Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002
|
0.31% |
2025-04-01
19 mo ago
|
| CVE-2025-3057 | 6.1Medium |
Drupal core
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
|
0.31% |
2025-04-01
19 mo ago
|
| CVE-2024-55638 | 9.8Critical |
Drupal core
Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008
|
0.98% |
2024-12-10
23 mo ago
|
| CVE-2024-55637 | 9.8Critical |
Drupal core
Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007
|
0.82% |
2024-12-10
23 mo ago
|
| CVE-2024-55636 | 9.8Critical |
Drupal core
Drupal core - Less critical - Gadget chain - SA-CORE-2024-006
|
0.93% |
2024-12-10
23 mo ago
|
| CVE-2024-55635 | 6.1Medium |
Drupal core
Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
|
0.32% |
2024-12-10
23 mo ago
|
| CVE-2024-55634 | 8.1High |
Drupal core
Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004
|
0.41% |
2024-12-10
23 mo ago
|