Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how drupal compares to other vendors in security performance

View Risk Score →

Software

drupal
284
drupal drupal
164
drupal drupal core
9
drupal project issue tracking module
5
drupal paragraphs
4
drupal print
4
drupal canvas project drupal canvas drupal
3
drupal drupal canvas
3
drupal enterprise mfa - tfa
3
drupal monster menus
3
drupal one time password
3
drupal project
3
drupal views
3
drupal aggregation module
2
drupal ai agents
2
drupal content construction kit
2
drupal cookies consent management
2
drupal facets
2
drupal flowdrop
2
drupal google tag
2
drupal imce module
2
drupal localization client
2
drupal node access rebuild progressive
2
drupal user karma module
2
drupal views bulk operations
2
drupal access
1
drupal access code
1
drupal acidfree
1
drupal activity
1
drupal advanced content feedback (aka admin_feedback)
1
drupal advanced varnish
1
drupal ai
1
drupal ajax checklist
1
drupal api key manager
1
drupal archive module
1
drupal artificial intelligence drupal
1
drupal at internet piano analytics
1
drupal atom module
1
drupal authenticated user page caching
1
drupal baguettebox.js
1
drupal bibliography module
1
drupal block attributes
1
drupal block class
1
drupal bootstrap site alert
1
drupal calculation fields
1
drupal cck comment reference
1
drupal central authentication system (cas) server
1
drupal ckeditor5 youtube
1
drupal clean restful
1
drupal coffee
1

Drupal Clean RESTfulClean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078

Risk 45
Severity
5.9
First published (updated )
CVE-2026-15087

Drupal DrupalDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009

Risk 34
Severity
5.4
First published (updated )
CVE-2026-55808

Drupal DrupalDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006

Risk 45
Severity
5.9
First published (updated )
CVE-2026-55804

Drupal DrupalDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

Risk 35
Severity
5.9
First published (updated )
CVE-2026-55806

Drupal DrupalDrupal core - Critical - PHP object injection - SA-CORE-2026-005

Risk 45
Severity
5.9
First published (updated )
CVE-2026-55803
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Ray Enterprise TranslationRay Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071

Risk 22
Severity
4.3
First published (updated )
CVE-2026-15080

Drupal ColorboxColorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58591

Drupal FlowDropFlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58590

Drupal FlowDropFlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067

Risk 34
Severity
5.4
First published (updated )
CVE-2026-58589

Drupal Canvas Project Drupal Canvas DrupalDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065

Risk 38
Severity
6.1
First published (updated )
CVE-2026-58587
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Canvas Project Drupal Canvas DrupalDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066

Risk 38
Severity
6.1
First published (updated )
CVE-2026-58588

Drupal ParagraphsParagraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061

Risk 40
Severity
6.5
First published (updated )
CVE-2026-13241

Drupal ParagraphsParagraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Risk 40
Severity
6.5
First published (updated )
CVE-2026-13240

Artificial Intelligence Project Artificial Intelligence DrupalAI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

Risk 32
Severity
4.8
First published (updated )
CVE-2026-13237

Artificial Intelligence Project Artificial Intelligence DrupalAI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056

Risk 29
Severity
4.2
First published (updated )
CVE-2026-13236
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Drupal AI (Artificial Intelligence)AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

Risk 38
Severity
6.1
First published (updated )
CVE-2026-13234

Drupal Advanced Content Feedback (aka admin_feedback)Advanced Content Feedback (aka admin_feedback) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-051

Risk 38
Severity
6.1
First published (updated )
CVE-2026-13231

Drupal Commerce CoreCommerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041

Risk 34
Severity
5.4
First published (updated )
CVE-2026-10769

Drupal TFA Basic PluginsTFA Basic Plugins - Access Bypass

Risk 31
Severity
5.1
First published (updated )
CVE-2026-6816

Drupal Term Reference TreeStored XSS in Drupal 7 Term Reference Tree module (token display templates and term labels)

Risk 34
Severity
5.1
First published (updated )
CVE-2026-4093
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Drupal CoreDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003

Risk 38
Severity
6.1
First published (updated )
CVE-2026-6367

Drupal DrupalDrupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002

Risk 61
Severity
6.6
First published (updated )
CVE-2026-6366

Drupal DrupalDrupal core - Critical - Cross-site scripting - SA-CORE-2026-001

Risk 38
Severity
6.1
First published (updated )
CVE-2026-6365

Drupal File (Field) PathsInformation disclosure via file URI overwrite in File (Field) Paths

Risk 33
Severity
6.9
First published (updated )
CVE-2026-1556

Drupal OpenID Connect / OAuth clientOpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025

Risk 16
Severity
4.3
EPSS
0.03%
First published (updated )
CVE-2026-3530
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Drupal Calculation FieldsCalculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023

Risk 27
Severity
6.1
EPSS
0.03%
First published (updated )
CVE-2026-3528

Drupal SAML SSO - Service ProviderSAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018

Risk 38
Severity
6.1
First published (updated )
CVE-2026-3217

Drupal Drupal CanvasDrupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017

Risk 26
Severity
5
First published (updated )
CVE-2026-3216

Jtenman Central Authentication System Server DrupalCentral Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007

Risk 29
Severity
4.2
First published (updated )
CVE-2026-1554

Bordeaux-metropole At Internet Piano Analytics DrupalAT Internet Piano Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-004

Risk 29
Severity
4.8
First published (updated )
CVE-2026-0947
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203