Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-118576 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File
Source ↗
CVE-2026-118576 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118575 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature p
Source ↗
CVE-2026-118575 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118574 - Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrect
Source ↗
CVE-2026-118574 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118573 - Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 T
Source ↗
CVE-2026-118573 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118572 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Aut
Source ↗
CVE-2026-118572 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118571 - Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting
Source ↗
CVE-2026-118571 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118570 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affec
Source ↗
CVE-2026-118570 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118569 - Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versi
Source ↗
CVE-2026-118569 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118568 - Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedde
Source ↗
CVE-2026-118568 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118567 - Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. This issue affects Bulk
Source ↗
CVE-2026-118567 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118565 - Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versio
Source ↗
CVE-2026-118565 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118564 - Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*.
Source ↗
CVE-2026-118564 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118563 - Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*.
Source ↗
CVE-2026-118563 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118562 - Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affect
Source ↗
CVE-2026-118562 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118561 - External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affe
Source ↗
CVE-2026-118561 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118560 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce St
Source ↗
CVE-2026-118560 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118559 - Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This is
Source ↗
CVE-2026-118559 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118558 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue
Source ↗
CVE-2026-118558 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118557 - Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce
Source ↗
CVE-2026-118557 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18
INFORMATIONAL
CVE-2026-118556 - Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce
Source ↗
CVE-2026-118556 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:18