WID-SEC-W-2026-2826

DeutschShown in its original language — a full translation is planned for a future version.

Drupal Module: Mehrere Schwachstellen

view advisory published 2026-08-12

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-73478US	—OT elevated	0.31% (24th)	—	2026-09-02
Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.
CVE-2026-73477US	—OT elevated	0.32% (24th)	—	2026-09-02
Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1.
CVE-2026-73476US	—	0.30% (22nd)	—	2026-09-02
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 t…
CVE-2026-73475US	—OT elevated	0.40% (35th)	—	2026-09-02
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-73474US	—	0.34% (27th)	—	2026-09-02
Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.…

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan