CVE Vulnerability Database
Search and browse 420,595 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-87954 | MEDIUM | 4.3 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxono... |
| CVE-2026-87953 | LOW | 3.3 | 0.1% | Oct 22, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forge... |
| CVE-2026-87952 | LOW | 3.1 | 0.2% | Oct 22, 2026 | Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with... |
| CVE-2026-87951 | LOW | 3.8 | 0.1% | Oct 22, 2026 | Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded ... |
| CVE-2026-87950 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Da... |
| CVE-2026-87949 | LOW | 3.3 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - ... |
| CVE-2026-87948 | LOW | 3.5 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - ... |
| CVE-2026-87947 | MEDIUM | 4.8 | 0.1% | Oct 22, 2026 | Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature S... |
| CVE-2026-87946 | MEDIUM | 4.8 | 0.1% | Oct 22, 2026 | Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affect... |
| CVE-2026-87945 | MEDIUM | 5.4 | 0.1% | Oct 22, 2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the... |
| CVE-2026-87944 | MEDIUM | 4.8 | 0.1% | Oct 22, 2026 | Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiT... |
| CVE-2026-87943 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects ... |
| CVE-2026-87942 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete ... |
| CVE-2026-87941 | MEDIUM | 5.9 | 0.1% | Oct 22, 2026 | Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x. |
| CVE-2026-87940 | MEDIUM | 5.4 | 0.1% | Oct 22, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly... |
| CVE-2026-87939 | MEDIUM | 4.2 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block ... |
| CVE-2026-87938 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all... |
| CVE-2026-87937 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a... |
| CVE-2026-87936 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P... |
| CVE-2026-84924 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verif... |
| CVE-2026-84923 | MEDIUM | 6.5 | 0.2% | Oct 22, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification /... |
| CVE-2026-84921 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects We... |
| CVE-2026-84920 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affect... |
| CVE-2026-84919 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe ... |
| CVE-2026-84918 | LOW | 3.7 | 0.1% | Oct 22, 2026 | Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th... |