CVE Vulnerability Database
Search and browse 420,256 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108097 | HIGH | 8.1 | 0.3% | Oct 30, 2026 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core a... |
| CVE-2026-107312 | MEDIUM | 4.3 | 0.1% | Oct 30, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Al... |
| CVE-2026-107311 | LOW | 3.7 | 0.1% | Oct 30, 2026 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsin... |
| CVE-2026-107310 | MEDIUM | 4.3 | 0.1% | Oct 30, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue af... |
| CVE-2026-107309 | LOW | 3.7 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcru... |
| CVE-2026-107308 | LOW | 3.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country all... |
| CVE-2026-107307 | MEDIUM | 4.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker ... |
| CVE-2026-107306 | LOW | 3.8 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link A... |
| CVE-2026-107268 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless... |
| CVE-2026-107267 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.... |
| CVE-2026-107266 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versi... |
| CVE-2026-107265 | MEDIUM | 5.4 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet all... |
| CVE-2026-107264 | MEDIUM | 5.4 | 0.2% | Oct 30, 2026 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field all... |
| CVE-2026-107263 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg version... |
| CVE-2026-107262 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This is... |
| CVE-2026-107261 | MEDIUM | 4.2 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A... |
| CVE-2026-107260 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Dist... |
| CVE-2026-107259 | MEDIUM | 5.4 | 0.2% | Oct 30, 2026 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code I... |
| CVE-2026-107258 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects I... |
| CVE-2026-107257 | MEDIUM | 6.5 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream version... |
| CVE-2026-107256 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue ... |
| CVE-2026-107255 | HIGH | 7.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restri... |
| CVE-2026-107254 | MEDIUM | 4.8 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A... |
| CVE-2026-107253 | MEDIUM | 5.9 | 0.1% | Oct 30, 2026 | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. |
| CVE-2026-107252 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: La... |