Veille CVE

Octobre 2026

2 CVE

  1. CVE-2026-96376 – Non évaluée

    Drupal Cloud

    Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1.

  2. CVE-2026-96375 – Non évaluée

    Drupal Cloud

    Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1.