CVE-2026-107252

Keine CWE-Zuordnung erfasst.

• Open Source Drupal Actstream <2.0.1alle Versionencert_bundDE
• Open Source Drupal Actstream <2.1.1alle Versionencert_bundDE
• Open Source Drupal Advanced Filesystem <1.0.28alle Versionencert_bundDE
• Open Source Drupal Authenticator Login Plus (2FA) <1.0.1alle Versionencert_bundDE
• Open Source Drupal Block AJAX <3.0.2alle Versionencert_bundDE
• Open Source Drupal Country <2.1.3alle Versionencert_bundDE
• Open Source Drupal Country <2.2.1alle Versionencert_bundDE
• Open Source Drupal DKAN <4.0.4alle Versionencert_bundDE
• Open Source Drupal DKAN <4.1.5alle Versionencert_bundDE
• Open Source Drupal ECA Helperalle Versionencert_bundDEcpe:/a:drupal:drupal:eca_helper
• Open Source Drupal Easy Breadcrumb <2.0.11alle Versionencert_bundDE
• Open Source Drupal Entity Reference Manager (Merge entities) <1.0.3alle Versionencert_bundDE
• Open Source Drupal Examples for Developers <4.0.7alle Versionencert_bundDE
• Open Source Drupal Freelinking <4.0.3alle Versionencert_bundDE
• Open Source Drupal Gutenberg <2.15.0alle Versionencert_bundDE
• Open Source Drupal Gutenberg <3.0.7alle Versionencert_bundDE
• Open Source Drupal Inline Entity Form Dialog <1.0.6alle Versionencert_bundDE
• Open Source Drupal Inline Formatter Field <4.2.0alle Versionencert_bundDE
• Open Source Drupal Leaflet <10.4.13alle Versionencert_bundDE
• Open Source Drupal Linked Field <1.8.0alle Versionencert_bundDE

• WID-SEC-W-2026-3819Drupal Erweiterungen: Mehrere SchwachstellenDeutsch2026-10-08csaf · cert_bundDE

  Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

• DRUPAL-CONTRIB-2026-1952026-10-07vendor · osvUS

  This module integrates the MathJax library into your Drupal site. MathJax is the modern JavaScript-based LaTeX rendering solution for the Internet. The module ships with library configurations that do not escape JavaScript within the TeX it formats. **Notice:** This release updates CDN URLs where possible and adds a system status warning for unsafe configurations. If you are unable to upgrade immediately, you can modify either the CDN URL or the custom MathJax JavaScript configuration according to the instructions in [MathJax Safe-mode](https://docs.mathjax.org/en/v2.7/safe-mode.html).