Security Operations
Threat Intelligence
❓
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-118541 CVE-2026-118541 - Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core INFORMATIONAL - Unknown 1 Details
CVE-2026-118540 CVE-2026-118540 - Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core INFORMATIONAL - Unknown 1 Details
CVE-2026-118539 CVE-2026-118539 - Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core v MEDIUM 6.5 Unknown 1 Details
CVE-2026-114573 CVE-2026-114573 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus all INFORMATIONAL - Unknown 1 Details
CVE-2026-114572 CVE-2026-114572 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentica MEDIUM 5.4 Unknown 1 Details
CVE-2026-114571 CVE-2026-114571 - Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole ver INFORMATIONAL - Unknown 1 Details
CVE-2026-114555 CVE-2026-114555 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field LOW 3.5 Unknown 1 Details
CVE-2026-114554 CVE-2026-114554 - Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to INFORMATIONAL - Unknown 1 Details
CVE-2026-114553 CVE-2026-114553 - Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend E INFORMATIONAL - Unknown 1 Details
CVE-2026-114548 CVE-2026-114548 - Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiti INFORMATIONAL - Unknown 1 Details
CVE-2026-114547 CVE-2026-114547 - Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: fro INFORMATIONAL - Unknown 1 Details
CVE-2026-114546 CVE-2026-114546 - Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting INFORMATIONAL - Unknown 1 Details
CVE-2026-114545 CVE-2026-114545 - Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalen INFORMATIONAL - Unknown 1 Details
CVE-2026-114544 CVE-2026-114544 - Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bul INFORMATIONAL - Unknown 1 Details
CVE-2026-114543 CVE-2026-114543 - Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects Simp INFORMATIONAL - Unknown 1 Details
CVE-2026-114542 CVE-2026-114542 - Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect INFORMATIONAL - Unknown 1 Details
CVE-2026-114541 CVE-2026-114541 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue INFORMATIONAL - Unknown 1 Details
CVE-2026-114540 CVE-2026-114540 - Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: fro INFORMATIONAL - Unknown 1 Details
CVE-2026-114539 CVE-2026-114539 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication By INFORMATIONAL - Unknown 1 Details
CVE-2026-114538 CVE-2026-114538 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap a INFORMATIONAL - Unknown 1 Details