Výsledky hledání

Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content (even without access to CKEditor themselves) may be able to exploit this Cross-Site Scripting (XSS) vulnerability to target…

Drupal CKEditor FI

tg: zranitelnost

17. 9. 04:00 · NCSC-FI · Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013

Multiples vulnérabilités dans Drupal (17 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS).

Drupal FR

tg: zranitelnost

17. 9. 02:00 · CERT-FR – avis · Multiples vulnérabilités dans Drupal (17 septembre 2026)

Multiple important vulnerabilities in Drupal

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-16639, CVE-2026-16646, CVE-2026-15917, CVE-2026-15916, CVE-2026-16640, CVE-2026-16638, CVE-2026-55805, CVE-2026-18261, CVE-2026-18260, CVE-2026-18259, CVE-2026-16645, CVE-2026-16644, CVE-2026-16643, CVE-2026-16642, CVE-2026-16641, CVE-2026-15088, CVE-2026-18985, Summary: CVE-2026-16639 : Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081 CVE-2026-16646 :…

EPSS 0.00 CVSS 9.8 CVE-2026-15088 CVE-2026-15916 CVE-2026-15917 CVE-2026-16638 CVE-2026-16639 CVE-2026-16640 CVE-2026-16641 CVE-2026-16642 CVE-2026-16643 CVE-2026-16644 CVE-2026-16645 CVE-2026-16646 CVE-2026-18259 CVE-2026-18260 CVE-2026-18261 CVE-2026-18985 CVE-2026-55805 Drupal FI

27. 8. 04:00 · NCSC-FI · Multiple important vulnerabilities in Drupal