CVE Vulnerability Database
Search and browse 420,256 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118584 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per... |
| CVE-2026-118583 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per... |
| CVE-2026-118582 | HIGH | 7.3 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. Th... |
| CVE-2026-118576 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File ... |
| CVE-2026-118575 | MEDIUM | 6.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature p... |
| CVE-2026-118574 | MEDIUM | 5.6 | 0.1% | Oct 30, 2026 | Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrect... |
| CVE-2026-118573 | MEDIUM | 4.8 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 T... |
| CVE-2026-118572 | MEDIUM | 4.8 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Aut... |
| CVE-2026-118571 | MEDIUM | 5.9 | 0.1% | Oct 30, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting ... |
| CVE-2026-118570 | MEDIUM | 6.5 | 0.1% | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affec... |
| CVE-2026-118569 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versi... |
| CVE-2026-118568 | LOW | 3.3 | 0.1% | Oct 30, 2026 | Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedde... |
| CVE-2026-118567 | MEDIUM | 4.7 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk... |
| CVE-2026-118565 | HIGH | 7.2 | 0.1% | Oct 30, 2026 | Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versio... |
| CVE-2026-118564 | MEDIUM | 6.6 | 0.1% | Oct 30, 2026 | Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*. |
| CVE-2026-118563 | MEDIUM | 6.6 | 0.1% | Oct 30, 2026 | Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*. |
| CVE-2026-118562 | HIGH | 7.2 | 0.3% | Oct 30, 2026 | Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affect... |
| CVE-2026-118561 | HIGH | 7.2 | 0.1% | Oct 30, 2026 | External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affe... |
| CVE-2026-118560 | MEDIUM | 5.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce St... |
| CVE-2026-118559 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This is... |
| CVE-2026-118558 | HIGH | 7.3 | 0.1% | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue ... |
| CVE-2026-118557 | LOW | 2.7 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce ... |
| CVE-2026-118556 | MEDIUM | 6.5 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce ... |
| CVE-2026-118555 | MEDIUM | 6.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce L... |
| CVE-2026-118554 | MEDIUM | 5.4 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentica... |