Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how drupal compares to other vendors in security performance

View Risk Score →

Software

drupal
486
drupal drupal
340
drupal drupal core
16
drupal views
9
drupal project issue tracking module
6
drupal enterprise mfa - tfa
5
drupal monster menus
5
drupal print
5
drupal aggregation module
4
drupal ai
4
drupal core
4
drupal everyblog
4
drupal paragraphs
4
drupal project
4
drupal canvas project drupal canvas drupal
3
drupal content construction kit
3
drupal drupal canvas
3
drupal drupal project issue tracking
3
drupal one time password
3
drupal shindig integrator
3
drupal two-factor authentication
3
drupal ai agents
2
drupal ajax checklist
2
drupal authenticator login
2
drupal bibliography module
2
drupal chatroom module
2
drupal cookies consent management
2
drupal custom search module
2
drupal database administration module
2
drupal drupal easylinks module
2
drupal email tfa
2
drupal facets
2
drupal file entity
2
drupal flowdrop
2
drupal google tag
2
drupal help tip module
2
drupal imce module
2
drupal internationalization
2
drupal localization client
2
drupal logintoboggan module
2
drupal migrate
2
drupal node access rebuild progressive
2
drupal opigno group manager
2
drupal print module
2
drupal professional theme
2
drupal saml sso - service provider
2
drupal secure site module
2
drupal taxonomy autotagger module
2
drupal trailscout module
2
drupal user karma module
2

Drupal DrupalThe Image module allows you to define and configure image fields. The module doesn't sufficiently ch…

Risk 42
Severity
9
First published (updated )
Advisory
SA-CORE-2026-010

Drupal DrupalXSS

Risk 42
Severity
9
First published (updated )
Advisory
SA-CORE-2026-011

Drupal DrupalXSS

Risk 42
Severity
9
First published (updated )
Advisory
SA-CORE-2026-012

Drupal Mother May IMother May I - Critical - Unsupported - SA-CONTRIB-2026-045

Risk 86
Severity
9.8
First published (updated )
CVE-2026-11913

Drupal Clean RESTfulClean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078

Risk 45
Severity
5.9
First published (updated )
CVE-2026-15087
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal DrupalDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009

Risk 34
Severity
5.4
First published (updated )
CVE-2026-55808

Drupal DrupalDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008

Risk 17
Severity
3.1
First published (updated )
CVE-2026-55807

Drupal DrupalDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006

Risk 45
Severity
5.9
First published (updated )
CVE-2026-55804

Drupal DrupalDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

Risk 35
Severity
5.9
First published (updated )
CVE-2026-55806

Drupal DrupalDrupal core - Critical - PHP object injection - SA-CORE-2026-005

Risk 45
Severity
5.9
First published (updated )
CVE-2026-55803
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Location SelectorLocation Selector - Critical - SQL Injection - SA-CONTRIB-2026-072

Risk 56
Severity
7.4
First published (updated )
CVE-2026-15081

Drupal Ray Enterprise TranslationRay Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071

Risk 22
Severity
4.3
First published (updated )
CVE-2026-15080

Drupal ColorboxColorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58591

Drupal FlowDropFlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58590

Drupal FlowDropFlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58589
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Canvas Project Drupal Canvas DrupalDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065

Risk 38
Severity
6.1
First published (updated )
CVE-2026-58587

Drupal Canvas Project Drupal Canvas DrupalDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066

Risk 38
Severity
6.1
First published (updated )
CVE-2026-58588

Drupal ParagraphsParagraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061

Risk 40
Severity
6.5
First published (updated )
CVE-2026-13241

Drupal ParagraphsParagraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Risk 40
Severity
6.5
First published (updated )
CVE-2026-13240

Artificial Intelligence Project Artificial Intelligence DrupalAI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

Risk 32
Severity
4.8
First published (updated )
CVE-2026-13237
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Artificial Intelligence Project Artificial Intelligence DrupalAI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056

Risk 29
Severity
4.2
First published (updated )
CVE-2026-13236

Artificial Intelligence Project Artificial Intelligence DrupalAI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

Risk 23
Severity
3.3
First published (updated )
CVE-2026-13235

Drupal Drupal AI (Artificial Intelligence)AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

Risk 38
Severity
6.1
First published (updated )
CVE-2026-13234

Drupal Advanced Content Feedback (admin_feedback)Advanced Content Feedback (aka admin_feedback) - Moderately critical - Access bypass / Insecure Direct Object Reference (IDOR) - SA-CONTRIB-2026-052

Risk 17
Severity
3.1
First published (updated )
CVE-2026-13232

Drupal Advanced Content Feedback (aka admin_feedback)Advanced Content Feedback (aka admin_feedback) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-051

Risk 38
Severity
6.1
First published (updated )
CVE-2026-13231
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Commerce CoreCommerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041

Risk 34
Severity
5.4
First published (updated )
CVE-2026-10769

Drupal Drupal 11.4End of life details

EOL
Jul 7, 2027
Support Ends
Jan 1, 2027
First published (updated )
EOL-drupal-11.4

Drupal DrupalThe Media module comes with support for oEmbed. The oEmbed specification contains two discovery mech…

Risk 42
Severity
9
First published (updated )
Advisory
SA-CORE-2026-008

Drupal DrupalDrupal core ships a rebuild.php front controller that can be used to rebuild Drupal (clearing the ca…

Risk 42
Severity
9
First published (updated )
Advisory
SA-CORE-2026-007

Drupal DrupalXSS

Risk 42
Severity
9
First published (updated )
Advisory
SA-CORE-2026-009
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203