CVE-2026-107252

priority · track · 0DEUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
— EPSS
no CVSS
Is it mine?
65 products
Check your exposure
Who says so?
2 sources
cert_bund · osv

No description recorded.

01

cvss

Technical severity, 0–10. One row per scoring source.

No CVSS score recorded.

02

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

03

affected products (65)

Products and version ranges known to be affected.

showing 20 of 65
04

advisories (2)

Vendor and ecosystem advisories describing this.

  • WID-SEC-W-2026-3819Drupal Erweiterungen: Mehrere SchwachstellenDeutsch2026-10-08csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

  • DRUPAL-CONTRIB-2026-1952026-10-07vendor · osvUS

    This module integrates the MathJax library into your Drupal site. MathJax is the modern JavaScript-based LaTeX rendering solution for the Internet. The module ships with library configurations that do not escape JavaScript within the TeX it formats. **Notice:** This release updates CDN URLs where possible and adds a system status warning for unsafe configurations. If you are unable to upgrade immediately, you can modify either the CDN URL or the custom MathJax JavaScript configuration according to the instructions in [MathJax Safe-mode](https://docs.mathjax.org/en/v2.7/safe-mode.html).

05

sources

Which sources assert this record, and when.

cert_bundosvNVDCVE.org
published —modified —
06

references

External citations — patches, advisories, analysis.

No references recorded.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan