Veille CVE

Semaine du 31 août au 6 septembre 2026

26 CVE

Critique 1 Élevée 2 Moyenne 20 Faible 3 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Drupal drupal » ✕
  1. CVE-2026-81269 5.3 Moyenne

    Drupal Data field · Data field project data field

    Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

  2. CVE-2026-81205 5.3 Moyenne

    Drupal LDAP / Active Directory Integration · Miniorange ldap \/ active directory integration

    Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issue affects LDAP / Active Directory Integration versions: from 0.0.0 to 2.2.1.

  3. CVE-2026-81201 6.1 Moyenne

    Drupal Monster Menus · Monster menus project monster menus

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.

  4. CVE-2026-81168 3.7 Faible

    Drupal CAPTCHA Protected Page · Captcha protected page project captcha protected page

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.

  5. CVE-2026-81167 4.8 Moyenne

    Drupal Address Suggestion · Address suggestion project address suggestion

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.

  6. CVE-2026-81166 5.3 Moyenne

    Drupal Digital Signage Framework · Lakedrops digital signage framework

    Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.

  7. CVE-2026-81165 5.3 Moyenne

    Drupal Blazy · Blazy project blazy

    Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.

  8. CVE-2026-81164 5.4 Moyenne

    Drupal Entity PDF · Entity pdf project entity pdf

    Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.

  9. CVE-2026-81162 5.3 Moyenne

    Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal · Dxpr builder project dxpr builder

    Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.

  10. CVE-2026-81161 3.3 Faible

    Drupal Content Moderation Notifications · Content moderation notifications project content moderation notifications

    Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.

  11. CVE-2026-81160 6.1 Moyenne

    Drupal Slick Carousel · Slick carousel project slick carousel

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.

  12. CVE-2026-81159 3.7 Faible

    Drupal Commerce CyberSource · Centarro commerce cybersource

    Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.

  13. CVE-2026-81158 5.3 Moyenne

    Drupal Entity API · Entity api project entity api

    Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.

  14. CVE-2026-76782 7.3 Élevée

    Drupal Screenshot

    Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.

  15. CVE-2026-76759 7.3 Élevée

    Drupal Screenshot

    Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.

  16. CVE-2026-76758 5.9 Moyenne

    Drupal Link content parser

    Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.

  17. CVE-2026-76757 5.9 Moyenne

    Drupal Gammu SMS Daemon

    Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.

  18. CVE-2026-76756 5.9 Moyenne

    Drupal Gammu SMS Daemon

    Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.

  19. CVE-2026-76755 5.9 Moyenne

    Drupal Gammu SMS Daemon

    Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.

  20. CVE-2026-73478 5.3 Moyenne

    Drupal Diff · Diff project diff

    Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.

  21. CVE-2026-73477 5.3 Moyenne

    Drupal Quick Tabs · Quick tabs project quick tabs

    Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1.

  22. CVE-2026-73476 5.4 Moyenne

    Drupal External Authentication · External authentication project external authentication

    Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.

  23. CVE-2026-73475 9.1 Critique

    Drupal Commerce PayPal · Centarro commerce paypal

    Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.

  24. CVE-2026-73474 5.3 Moyenne

    Drupal Entity Share Websub · Entity share websub project entity share websub

    Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2.

  25. CVE-2026-18986 4.8 Moyenne

    Drupal Entity Browser · Entity browser project entity browser

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS. This issue affects Entity Browser versions: from 0.0.0 to 2.16.0.

  26. CVE-2026-16647 4.1 Moyenne

    Drupal Disable Login Page · Zyxware disable login page

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.