Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
0.0 NA
CVE-2026-114572 — Domain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass. This issue affects Domain Login Restrict versions: from 0.0.0 to 1…

| Authentication
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114555 — Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions: from 0.0.0 to 2.0.14.

data_field | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114554 — AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114571 — Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252

Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole versions: from 0.0.0 to 1.3.0.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-114573 — Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows Object Injection. This issue affects Monster Menus versions: from 0.0.0 to …

| Injection
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118539 — Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118540 — Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.2.0.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118541 — Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118542 — Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

commerce_core | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118543 — Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13.

commerce_core | Cross-Site Request Forgery
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118544 — Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259

Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3…

commerce_core | Information Disclosure
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118555 — Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260

Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce License versions: from 0.0.0 to 3.1.1.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118556 — Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118557 — Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

| Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118558 — Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

| Cross-Site Request Forgery
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118559 — Commerce Stripe - Moderately critical - Improper verification of cryptographic signature …

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.

| Cryptography
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118560 — Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Stripe allows Cross-Site Scripting (XSS). This issue affects Commerce Stripe vers…

| Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118545 — AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-20…

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Art…

artificial_intelligence | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118546 — AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-20…

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Art…

artificial_intelligence | Cross-Site Scripting
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
0.0 NA
CVE-2026-118548 — AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-…

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1…

artificial_intelligence | Authorization
Oct 30, 2026 Oct 30, 2026
Oct 30, 2026
Oct 30, 2026
Showing 20 of 17062 Results