CVE-2026-107312

No weakness (CWE) mapping recorded.

• Open Source Drupal Actstream <2.0.1all versionscert_bundDE
• Open Source Drupal Actstream <2.1.1all versionscert_bundDE
• Open Source Drupal Advanced Filesystem <1.0.28all versionscert_bundDE
• Open Source Drupal Authenticator Login Plus (2FA) <1.0.1all versionscert_bundDE
• Open Source Drupal Block AJAX <3.0.2all versionscert_bundDE
• Open Source Drupal Country <2.1.3all versionscert_bundDE
• Open Source Drupal Country <2.2.1all versionscert_bundDE
• Open Source Drupal DKAN <4.0.4all versionscert_bundDE
• Open Source Drupal DKAN <4.1.5all versionscert_bundDE
• Open Source Drupal ECA Helperall versionscert_bundDEcpe:/a:drupal:drupal:eca_helper
• Open Source Drupal Easy Breadcrumb <2.0.11all versionscert_bundDE
• Open Source Drupal Entity Reference Manager (Merge entities) <1.0.3all versionscert_bundDE
• Open Source Drupal Examples for Developers <4.0.7all versionscert_bundDE
• Open Source Drupal Freelinking <4.0.3all versionscert_bundDE
• Open Source Drupal Gutenberg <2.15.0all versionscert_bundDE
• Open Source Drupal Gutenberg <3.0.7all versionscert_bundDE
• Open Source Drupal Inline Entity Form Dialog <1.0.6all versionscert_bundDE
• Open Source Drupal Inline Formatter Field <4.2.0all versionscert_bundDE
• Open Source Drupal Leaflet <10.4.13all versionscert_bundDE
• Open Source Drupal Linked Field <1.8.0all versionscert_bundDE

• WID-SEC-W-2026-3819Drupal Erweiterungen: Mehrere SchwachstellenDeutsch2026-10-08csaf · cert_bundDE

  Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

• DRUPAL-CONTRIB-2026-2152026-10-07vendor · osvUS

  The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality. The "Email Example" feature implemented by the email\_example submodule can be used to send illegitimate emails to arbitrary email addresses. Therefore, the email\_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.