Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-107268 - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless
Source ↗
CVE-2026-107268 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107267 - Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.
Source ↗
CVE-2026-107267 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
INFORMATIONAL
CVE-2026-107266 - Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versi
Source ↗
CVE-2026-107266 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107265 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet all
Source ↗
CVE-2026-107265 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107264 - Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field all
Source ↗
CVE-2026-107264 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107263 - Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg version
Source ↗
CVE-2026-107263 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107262 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This is
Source ↗
CVE-2026-107262 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107261 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A
Source ↗
CVE-2026-107261 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
INFORMATIONAL
CVE-2026-107260 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Dist
Source ↗
CVE-2026-107260 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107259 - Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code I
Source ↗
CVE-2026-107259 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107258 - Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects I
Source ↗
CVE-2026-107258 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107257 - Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream version
Source ↗
CVE-2026-107257 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
INFORMATIONAL
CVE-2026-107256 - Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue
Source ↗
CVE-2026-107256 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
INFORMATIONAL
CVE-2026-107255 - Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restri
Source ↗
CVE-2026-107255 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107254 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A
Source ↗
CVE-2026-107254 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107253 - Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*.
Source ↗
CVE-2026-107253 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107252 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: La
Source ↗
CVE-2026-107252 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107251 - Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This
Source ↗
CVE-2026-107251 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
MEDIUM
CVE-2026-107250 - Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*.
Source ↗
CVE-2026-107250 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17
CRITICAL
CVE-2026-107249 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows
Source ↗
CVE-2026-107249 ·
NIST NVD - National Vulnerability Database · published 2026-10-30T04:17