Drupal / Drupal Core
25 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-15916 | Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010 | MEDIUM | 4.2 | Aug 25, 2026 |
| CVE-2026-15917 | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 | MEDIUM | 4.7 | Aug 25, 2026 |
| CVE-2026-55805 | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012 | MEDIUM | 5.4 | Aug 25, 2026 |
| CVE-2026-55808 | Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009 | MEDIUM | 5.4 | Jul 10, 2026 |
| CVE-2026-55807 | Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008 | LOW | 3.1 | Jul 10, 2026 |
| CVE-2026-55806 | Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007 | MEDIUM | 5.9 | Jul 10, 2026 |
| CVE-2026-55804 | Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006 | MEDIUM | 5.9 | Jul 10, 2026 |
| CVE-2026-55803 | Drupal core - Critical - PHP object injection - SA-CORE-2026-005 | MEDIUM | 5.9 | Jul 10, 2026 |
| CVE-2026-9082 KEV | Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 | CRITICAL | 9.8 | May 20, 2026 |
| CVE-2026-6367 | Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 | MEDIUM | 6.1 | May 19, 2026 |
| CVE-2026-6366 | Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002 | MEDIUM | 6.6 | May 19, 2026 |
| CVE-2026-6365 | Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 | MEDIUM | 6.1 | May 19, 2026 |
| CVE-2025-13083 | Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 | LOW | 1.7 | Nov 18, 2025 |
| CVE-2025-13082 | Drupal core - Moderately critical - Defacement - SA-CORE-2025-007 | LOW | 2.1 | Nov 18, 2025 |
| CVE-2025-13081 | Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006 | MEDIUM | 4.5 | Nov 18, 2025 |
| CVE-2025-13080 | Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 | LOW | 2.7 | Nov 18, 2025 |
| CVE-2025-31675 | Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 | LOW | 1.3 | Mar 31, 2025 |
| CVE-2025-31674 | Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003 | MEDIUM | 4.5 | Mar 31, 2025 |
| CVE-2025-31673 | Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002 | MEDIUM | 5.3 | Mar 31, 2025 |
| CVE-2025-3057 | Drupal core - Critical - Cross site scripting - SA-CORE-2025-001 | MEDIUM | 6.1 | Mar 31, 2025 |
| CVE-2024-55638 | Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008 | HIGH | 7.5 | Dec 9, 2024 |
| CVE-2024-55637 | Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007 | HIGH | 7.5 | Dec 9, 2024 |
| CVE-2024-55636 | Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 | LOW | 2.3 | Dec 9, 2024 |
| CVE-2024-55635 | Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 | MEDIUM | 6.1 | Dec 9, 2024 |
| CVE-2024-55634 | Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 | MEDIUM | 6.9 | Dec 9, 2024 |
Showing 1 to 25 of 25 CVEs