Security Operations
Threat Intelligence
❓
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-107263 CVE-2026-107263 - Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg version MEDIUM 5.4 Unknown 1 Details
CVE-2026-107262 CVE-2026-107262 - Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This is MEDIUM 5.3 Unknown 1 Details
CVE-2026-107261 CVE-2026-107261 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A MEDIUM 4.2 Unknown 1 Details
CVE-2026-107260 CVE-2026-107260 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Dist INFORMATIONAL - Unknown 1 Details
CVE-2026-107259 CVE-2026-107259 - Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code I MEDIUM 5.4 Unknown 1 Details
CVE-2026-107258 CVE-2026-107258 - Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects I MEDIUM 5.4 Unknown 1 Details
CVE-2026-107257 CVE-2026-107257 - Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream version MEDIUM 6.5 Unknown 1 Details
CVE-2026-107256 CVE-2026-107256 - Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue INFORMATIONAL - Unknown 1 Details
CVE-2026-107255 CVE-2026-107255 - Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restri INFORMATIONAL - Unknown 1 Details
CVE-2026-107254 CVE-2026-107254 - Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows A MEDIUM 4.8 Unknown 1 Details
CVE-2026-107253 CVE-2026-107253 - Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. MEDIUM 5.9 Unknown 1 Details
CVE-2026-107252 CVE-2026-107252 - Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: La MEDIUM 5.4 Unknown 1 Details
CVE-2026-107251 CVE-2026-107251 - Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This MEDIUM 6.5 Unknown 1 Details
CVE-2026-107250 CVE-2026-107250 - Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. MEDIUM 5.9 Unknown 1 Details
CVE-2026-107249 CVE-2026-107249 - Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows CRITICAL 9.8 Unknown 1 Details
CVE-2026-74915 CVE-2026-74915 - A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or wr INFORMATIONAL - Unknown 1 Details
CVE-2026-74912 CVE-2026-74912 - On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is INFORMATIONAL - Unknown 1 Details
CVE-2026-65587 CVE-2026-65587 - A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the INFORMATIONAL - Unknown 1 Details
CVE-2026-65586 CVE-2026-65586 - Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use INFORMATIONAL - Unknown 1 Details
CVE-2026-65584 CVE-2026-65584 - Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in th INFORMATIONAL - linux Unknown 1 Details