Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
0.0 NA
CVE-2026-118550 — AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe…

artificial_intelligence | Misconfiguration
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118549 — AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Art…

artificial_intelligence | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118548 — AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-…

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1…

artificial_intelligence | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118546 — AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-20…

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Art…

artificial_intelligence | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118545 — AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-20…

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Art…

artificial_intelligence | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118544 — Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259

Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3…

commerce_core | Information Disclosure
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118543 — Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

commerce_core | Cross-Site Request Forgery
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118542 — Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118541 — Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118540 — Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.2.0.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118539 — Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114573 — Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows Object Injection. This issue affects Monster Menus versions: from 0.0.0 to …

| Injection
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114572 — Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1…

| Authentication
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114571 — Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252

Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole versions: from 0.0.0 to 1.3.0.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114555 — Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions: from 0.0.0 to 2.0.14.

data_field | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114554 — AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114553 — Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114548 — ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-2…

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Im…

| Misconfiguration
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114547 — TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246

Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114546 — Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media…

| Information Disclosure
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
Showing 20 of 17056 Results