Most recent entries from all

bdu:2026-07320

BIT-drupal-2026-6366 — Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002

Affected: Bitnami: drupal

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.

This issue affects Drupal core: from 8.0.0 before 10.5.9, from 10.6.0 before 10.6.7, from 11.0.0 before 11.2.11, from 11.3.0 before 11.3.7.

certfr-2026-avi-0447 — De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une exécution…

certfr-2026-avi-0447

EUVD-2026-319776

fkie_cve-2026-6366

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.

This issue affects Drupal core: from 8.0.0 before 10.5.9, from 10.6.0 before 10.6.7, from 11.0.0 before 11.2.11, from 11.3.0 before 11.3.7.

GHSA-xmjc-63pr-2mpg — Drupal core allows Object Injection

Affected: Packagist: drupal/core

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.

This issue affects Drupal core: from 8.0.0 before 10.5.9, from 10.6.0 before 10.6.7, from 11.0.0 before 11.2.11, from 11.3.0 before 11.3.7.

WID-SEC-W-2026-1151 — Drupal Core: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Drupal Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.