CVE-2026-76758
Link content parser - Critical - Unsupported - SA-CONTRIB-2026-101
CVE-2026-76758 is a medium vulnerability (CVSS 5.9) in Drupal Link Content Parser, published August 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.
- Severity
- 5.9 MediumCVSS 3.1, CVE List
- Exploit chance
- 0.35%EPSS, 28th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: ..
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/postlight_parserPackagist:https://packages.drupal.org/8 | All versions | None known |
What each source reports
CVE List Score used
Link content parser - Critical - Unsupported - SA-CONTRIB-2026-101
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: ..
- Record
CVE-2026-76758- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2026-70011
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: ..
- Record
EUVD-2026-70011- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h85j-px6x-x8h7
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: ..
- Record
GHSA-h85j-px6x-x8h7- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: ..
- Record
CVE-2026-76758- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVDRUPAL-CONTRIB-2026-101No score
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons.
- Record
DRUPAL-CONTRIB-2026-101- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.