Veille CVE

Août 2026

17 CVE

Critique 4 Élevée 2 Moyenne 11 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Drupal drupal » ✕
  1. CVE-2026-55805 5.4 Moyenne

    Drupal core

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.

  2. CVE-2026-18985 8.1 Élevée

    Drupal Edit in-place field

    Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.

  3. CVE-2026-18261 5.7 Moyenne

    Drupal Powerful Surveys

    Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.

  4. CVE-2026-18260 5.7 Moyenne

    Drupal Disable Login Page

    Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.

  5. CVE-2026-18259 7.5 Élevée

    Drupal Token Content Access

    Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.

  6. CVE-2026-16646 5.7 Moyenne

    Drupal PanKM

    Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*.

  7. CVE-2026-16645 9.1 Critique

    Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery

    Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.

  8. CVE-2026-16644 9.1 Critique

    Drupal Webform REST

    Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.

  9. CVE-2026-16643 5.7 Moyenne

    Drupal Lunr exposed filters

    Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.

  10. CVE-2026-16642 5.7 Moyenne

    Drupal Email Login OTP

    Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

  11. CVE-2026-16641 9.8 Critique

    Drupal Commerce Elavon

    Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.

  12. CVE-2026-16640 6.1 Moyenne

    Drupal Search API Autocomplete

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.

  13. CVE-2026-16639 9.8 Critique

    Drupal Internationalization Single Sign-On

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.

  14. CVE-2026-16638 6.1 Moyenne

    Drupal Media Folders

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8.

  15. CVE-2026-15917 4.7 Moyenne

    Drupal core

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.

  16. CVE-2026-15916 4.2 Moyenne

    Drupal core

    Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.

  17. CVE-2026-15088 5.7 Moyenne

    Drupal Development Environment

    Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.