DeutschShown in its original language — a full translation is planned for a future version.
Drupal Module: Mehrere Schwachstellen
view advisory published 2026-07-22
Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und weitere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-16646US | —OT elevated | — | ||
Vulnerability in Drupal PanKM. This issue affects PanKM versions: *.*. | ||||
| CVE-2026-16645US | —OT elevated | — | ||
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript… | ||||
| CVE-2026-16644US | —OT elevated | — | ||
Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0. | ||||
| CVE-2026-16643US | — | — | ||
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*. | ||||
| CVE-2026-16642US | — | — | ||
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*. | ||||
| CVE-2026-16641US | — | — | ||
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*. | ||||
| CVE-2026-16640US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search… | ||||
| CVE-2026-16639US | —OT elevated | — | ||
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationali… | ||||
| CVE-2026-16638US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versi… | ||||
| CVE-2026-15088US | — | — | ||
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*. | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-2474 - CSAF Versionself
- WID-SEC-2026-2474 - Portal Versionself
- Drupal Security Advisory sa-contrib-2026-080 vom 2026-07-22external
- Drupal Security Advisory sa-contrib-2026-081 vom 2026-07-22external
- Drupal Security Advisory sa-contrib-2026-082 vom 2026-07-22external
- Drupal Security Advisory sa-contrib-2026-083 vom 2026-07-22external
- Drupal Security Advisory sa-contrib-2026-084 vom 2026-07-22external
- Drupal Security Advisory sa-contrib-2026-085 vom 2026-07-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan