Security Operations
Threat Intelligence
❓
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-107309 CVE-2026-107309 - Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcru LOW 3.7 Unknown 1 Details
CVE-2026-107308 CVE-2026-107308 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country all LOW 3.1 Unknown 1 Details
CVE-2026-107307 CVE-2026-107307 - Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker MEDIUM 4.3 Unknown 1 Details
CVE-2026-107306 CVE-2026-107306 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link A LOW 3.8 Unknown 1 Details
CVE-2026-107268 CVE-2026-107268 - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless MEDIUM 4.3 Unknown 1 Details
CVE-2026-107267 CVE-2026-107267 - Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0. MEDIUM 5.3 Unknown 1 Details
CVE-2026-107266 CVE-2026-107266 - Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versi INFORMATIONAL - Unknown 1 Details
CVE-2026-107265 CVE-2026-107265 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet all MEDIUM 5.4 Unknown 1 Details
CVE-2026-107264 CVE-2026-107264 - Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field all MEDIUM 5.4 Unknown 1 Details
CVE-2026-107263 CVE-2026-107263 - Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg version MEDIUM 5.4 Unknown 1 Details
CVE-2026-107262 CVE-2026-107262 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This is MEDIUM 5.3 Unknown 1 Details
CVE-2026-107261 CVE-2026-107261 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A MEDIUM 4.2 Unknown 1 Details
CVE-2026-107260 CVE-2026-107260 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Dist INFORMATIONAL - Unknown 1 Details
CVE-2026-107259 CVE-2026-107259 - Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code I MEDIUM 5.4 Unknown 1 Details
CVE-2026-107258 CVE-2026-107258 - Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects I MEDIUM 5.4 Unknown 1 Details
CVE-2026-107257 CVE-2026-107257 - Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream version MEDIUM 6.5 Unknown 1 Details
CVE-2026-107256 CVE-2026-107256 - Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue INFORMATIONAL - Unknown 1 Details
CVE-2026-107255 CVE-2026-107255 - Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restri INFORMATIONAL - Unknown 1 Details
CVE-2026-107254 CVE-2026-107254 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A MEDIUM 4.8 Unknown 1 Details
CVE-2026-107253 CVE-2026-107253 - Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. MEDIUM 5.9 Unknown 1 Details