DeutschShown in its original language — a full translation is planned for a future version.
Drupal: Mehrere Schwachstellen
view advisory published 2026-06-10
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und weitere, nicht spezifizierte Auswirkungen zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-11915US | — | — | ||
vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions: *.*. | ||||
| CVE-2026-11914US | — | — | ||
vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*. | ||||
| CVE-2026-11913US | — | — | ||
vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*. | ||||
| CVE-2026-11909US | —OT elevated | — | ||
Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6. | ||||
| CVE-2026-11908US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Stored XSS. This issue affects Tagify versions: from 0.0.… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-1882 - CSAF Versionself
- WID-SEC-2026-1882 - Portal Versionself
- Drupal Security Advisory sa-contrib-2026-043 vom 2026-06-10external
- Drupal Security Advisory sa-contrib-2026-044 vom 2026-06-10external
- Drupal Security Advisory sa-contrib-2026-045 vom 2026-06-10external
- Drupal Security Advisory sa-contrib-2026-046 vom 2026-06-10external
- Drupal Security Advisory sa-contrib-2026-047 vom 2026-06-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan