Drupal Core vulnerabilities

• drupal commerce core Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259 CVE-2026-118544 Fix available No scoreOctober 28, 2026
• drupal commerce core Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258 CVE-2026-118543 Fix available No scoreOctober 28, 2026
• drupal commerce core Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257 CVE-2026-118542 Fix available No scoreOctober 28, 2026
• drupal commerce core Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256 CVE-2026-118541 Fix available No scoreOctober 28, 2026
• drupal commerce core Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255 CVE-2026-118540 Fix available No scoreOctober 28, 2026
• drupal commerce core Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 CVE-2026-118539 Fix available 6.5 MediumOctober 28, 2026
• drupal core Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016 CVE-2026-108514 Fix available No scoreOctober 14, 2026
• drupal core Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015 CVE-2026-108515 Fix available No scoreOctober 14, 2026
• drupal core Drupal core - Critical - Remote code execution - SA-CORE-2026-014 CVE-2026-108097 Public exploitFix available No scoreOctober 14, 2026
• drupal core Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012 CVE-2026-55805 Fix available 5.4 MediumJuly 15, 2026
• drupal core Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 CVE-2026-15917 Fix available 4.7 MediumJuly 15, 2026
• drupal core Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010 CVE-2026-15916 Fix available 4.2 MediumJuly 15, 2026
• drupal, drupal core +1 more Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009 CVE-2026-55808 Fix available 5.4 MediumJune 17, 2026
• drupal, drupal core +1 more Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008 CVE-2026-55807 Fix available 3.1 LowJune 17, 2026
• drupal, drupal core +1 more Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007 CVE-2026-55806 Fix available 5.9 MediumJune 17, 2026
• drupal, drupal core +1 more Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006 CVE-2026-55804 Fix available 5.9 MediumJune 17, 2026
• drupal, drupal core +1 more Drupal core - Critical - PHP object injection - SA-CORE-2026-005 CVE-2026-55803 Fix available 5.9 MediumJune 17, 2026
• centarro commerce core Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041 CVE-2026-10769 Fix available 5.4 MediumJune 3, 2026
• drupal, drupal core +1 more Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 CVE-2026-6367 Fix available 6.1 MediumApril 15, 2026
• drupal, drupal core +1 more Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 CVE-2025-13083 Fix available 3.7 LowNovember 12, 2025
• drupal, drupal core +1 more Drupal core - Moderately critical - Defacement - SA-CORE-2025-007 CVE-2025-13082 Fix available 4.3 MediumNovember 12, 2025
• drupal, drupal core +1 more Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006 CVE-2025-13081 Fix available 5.9 MediumNovember 12, 2025
• drupal, drupal core +1 more Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 CVE-2024-55635 Fix available 6.1 MediumDecember 9, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 CVE-2024-11942 Fix available 5.9 MediumOctober 16, 2024
• drupal core, drupal +1 more Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 CVE-2026-9082 In KEVPublic exploitFix available EPSS 89.4% 9.8 CriticalFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002 CVE-2026-6366 Fix available 6.6 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 CVE-2026-6365 Fix available 6.1 MediumFebruary 12, 2024
• drupal, drupal core, link +2 more Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004 CVE-2025-31675 Fix available 5.4 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003 CVE-2025-31674 Fix available 7.5 HighFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002 CVE-2025-31673 Fix available 4.6 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Critical - Cross site scripting - SA-CORE-2025-001 CVE-2025-3057 Fix available 6.1 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005 CVE-2025-13080 Fix available 5.3 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008 CVE-2024-55638 Fix available 9.8 CriticalFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007 CVE-2024-55637 Fix available 9.8 CriticalFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 CVE-2024-55636 Fix available 9.8 CriticalFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 CVE-2024-55634 Fix available 8.1 HighFebruary 12, 2024
• drupal, drupal core +1 more Drupal core Denial of Service vulnerability CVE-2024-45440 Public exploitFix available 5.3 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 CVE-2024-12393 Fix available 5.4 MediumFebruary 12, 2024
• drupal, drupal core +1 more Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001 CVE-2024-11941 Fix available 7.5 HighJanuary 17, 2024
• drupal core, drupal +1 more Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 CVE-2023-5256 Fix available 7.5 HighSeptember 20, 2023
• drupal core, drupal +1 more Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005 CVE-2023-31250 Fix available 6.5 MediumApril 19, 2023
• drupal core, drupal +1 more Lack of domain validation in Druple core CVE-2022-25276 Fix available 6.1 MediumJuly 20, 2022
• drupal core, drupal +1 more Drupal core arbitrary PHP code execution CVE-2022-25277 Fix available 7.2 HighJuly 20, 2022
• drupal core, drupal +1 more Drupal core Denial of Service vulnerability CVE-2022-25278 Fix available 6.5 MediumJuly 20, 2022
• drupal core, drupal +1 more Drupal core Denial of Service vulnerability CVE-2022-25275 Fix available 7.5 HighJuly 20, 2022
• drupal core, drupal +1 more Access bypass in Drupal core CVE-2022-25274 Fix available 5.4 MediumApril 20, 2022
• drupal core, drupal +1 more Drupal core Denial of Service vulnerability CVE-2022-25273 Fix available 7.5 HighApril 20, 2022
• drupal core, drupal +1 more Drupal core Denial of Service vulnerability CVE-2022-25270 Fix available 6.5 MediumFebruary 16, 2022
• drupal core, drupal, fedoraproject fedora +2 more Drupal core Denial of Service vulnerability CVE-2022-25271 Fix available 7.5 HighFebruary 16, 2022
• drupal core, drupal +1 more Access bypass in Drupal Core 8/9 CVE-2020-13668 Fix available 6.1 MediumFebruary 11, 2022
• Show olderLoading…