DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Drupal Module: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-07-08
Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, umSQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-15089US | — | — | ||
Vulnerability in Drupal Commerce guest registration. This issue affects Commerce guest registration versions: *.*. | ||||
| CVE-2026-15087US | — | — | ||
vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*. | ||||
| CVE-2026-15086US | — | — | ||
vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . This issue affects Raw Formatter [Meta Tag Formatter] versions: *.*. | ||||
| CVE-2026-15085US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI SEO/GEO Analyzer allows Stored XSS. This issue affects AI SEO/GEO An… | ||||
| CVE-2026-15084US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Patterns (SDC in Drupal UI) allows Stored XSS. This issue affects UI… | ||||
| CVE-2026-15083US | — | — | ||
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal ECA: Event - Condition - Action allows Object Injection. This issue affects E… | ||||
| CVE-2026-15082US | — | — | ||
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Siteimprove Analytics allows Cross-Site Scripting (XSS). This issue aff… | ||||
| CVE-2026-15081US | — | — | ||
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Location Selector allows SQL Injection. This issue affects Location Sel… | ||||
| CVE-2026-15080US | — | — | ||
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from… | ||||
| CVE-2026-15079US | — | — | ||
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allows Brute Force. This issue affects Login Disable versions: from 0.0.0 to 2.1.4. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- WID-SEC-W-2026-2251 - CSAF Versionself
- WID-SEC-2026-2251 - Portal Versionself
- Drupal Security Advisory sa-contrib-2026-070 vom 2026-07-08external
- Drupal Security Advisory sa-contrib-2026-071 vom 2026-07-08external
- Drupal Security Advisory sa-contrib-2026-072 vom 2026-07-08external
- Drupal Security Advisory sa-contrib-2026-073 vom 2026-07-08external
- Drupal Security Advisory sa-contrib-2026-074 vom 2026-07-08external
- Drupal Security Advisory sa-contrib-2026-075 vom 2026-07-08external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan