WID-SEC-W-2026-3819

DeutschShown in its original language — a full translation is planned for a future version.

Drupal Erweiterungen: Mehrere Schwachstellen

view advisory published 2026-10-08

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

describes (26)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-107249US	—	—	—	—
CVE-2026-107250US	—	—	—	—
CVE-2026-107251US	—	—	—	—
CVE-2026-107252US	—	—	—	—
CVE-2026-107253US	—	—	—	—
CVE-2026-107254US	—	—	—	—
CVE-2026-107255US	—	—	—	—
CVE-2026-107257US	—	—	—	—
CVE-2026-107258US	—	—	—	—
CVE-2026-107259US	—	—	—	—
CVE-2026-107261US	—	—	—	—
CVE-2026-107262US	—	—	—	—
CVE-2026-107263US	—	—	—	—
CVE-2026-107264US	—	—	—	—
CVE-2026-107265US	—	—	—	—
CVE-2026-107266US	—	—	—	—
CVE-2026-107267US	—	—	—	—
CVE-2026-107268US	—	—	Exploit	—
CVE-2026-107306US	—	—	—	—
CVE-2026-107307US	—	—	—	—

showing 20 of 26

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan