Veille CVE

Jeudi 22 octobre 2026

5 CVE sur 72

Critique 1 Élevée 1 Moyenne 50 Faible 15 Non évaluée 5 Exploitées (KEV) Tri : plus récentes « Drupal drupal » ✕
  1. CVE-2026-96391 – Non évaluée

    Drupal Webform REST

    Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.

  2. CVE-2026-96379 – Non évaluée

    Drupal CookieCuttr

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.

  3. CVE-2026-96363 – Non évaluée

    Drupal Webform

    Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  4. CVE-2026-87941 – Non évaluée

    Drupal Patreon

    Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

  5. CVE-2026-87938 – Non évaluée

    Drupal CSP log

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.