| CVE-2026-74915 | NA | N/A | A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read… | 2026-10-30 |
| CVE-2026-91920 | MEDIUM | 6.5 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked tran… | 2026-10-30 |
| CVE-2026-107249 | NA | N/A | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block A… | 2026-10-30 |
| CVE-2026-107250 | NA | N/A | Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*.… | 2026-10-30 |
| CVE-2026-107251 | NA | N/A | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Brow… | 2026-10-30 |
| CVE-2026-107252 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal M… | 2026-10-30 |
| CVE-2026-107253 | NA | N/A | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*.… | 2026-10-30 |
| CVE-2026-107254 | NA | N/A | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA… | 2026-10-30 |
| CVE-2026-107255 | NA | N/A | Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affe… | 2026-10-30 |
| CVE-2026-107256 | NA | N/A | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. T… | 2026-10-30 |
| CVE-2026-107257 | NA | N/A | Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstre… | 2026-10-30 |
| CVE-2026-107258 | NA | N/A | Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue… | 2026-10-30 |
| CVE-2026-107259 | NA | N/A | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field all… | 2026-10-30 |
| CVE-2026-107260 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal S… | 2026-10-30 |
| CVE-2026-107261 | NA | N/A | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA… | 2026-10-30 |
| CVE-2026-107262 | NA | N/A | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forger… | 2026-10-30 |
| CVE-2026-107263 | NA | N/A | Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenbe… | 2026-10-30 |
| CVE-2026-107264 | NA | N/A | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter… | 2026-10-30 |
| CVE-2026-107265 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal L… | 2026-10-30 |
| CVE-2026-107266 | NA | N/A | Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views S… | 2026-10-30 |
| CVE-2026-107267 | NA | N/A | Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions:… | 2026-10-30 |
| CVE-2026-107268 | NA | N/A | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Pa… | 2026-10-30 |
| CVE-2026-107306 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal M… | 2026-10-30 |
| CVE-2026-107307 | NA | N/A | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects Sm… | 2026-10-30 |
| CVE-2026-107308 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal C… | 2026-10-30 |
| CVE-2026-107309 | NA | N/A | Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Eas… | 2026-10-30 |
| CVE-2026-107310 | NA | N/A | Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. Thi… | 2026-10-30 |
| CVE-2026-107311 | NA | N/A | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forcef… | 2026-10-30 |
| CVE-2026-107312 | NA | N/A | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Ex… | 2026-10-30 |
| CVE-2026-108097 | NA | N/A | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Dru… | 2026-10-30 |
| CVE-2026-108099 | NA | N/A | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Ent… | 2026-10-30 |
| CVE-2026-108514 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal D… | 2026-10-30 |
| CVE-2026-108515 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal D… | 2026-10-30 |
| CVE-2026-110738 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal G… | 2026-10-30 |
| CVE-2026-114523 | NA | N/A | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Dr… | 2026-10-30 |
| CVE-2026-114524 | NA | N/A | Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. T… | 2026-10-30 |
| CVE-2026-114525 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal A… | 2026-10-30 |
| CVE-2026-114526 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal B… | 2026-10-30 |
| CVE-2026-114527 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal U… | 2026-10-30 |
| CVE-2026-114528 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Z… | 2026-10-30 |
| CVE-2026-114529 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal C… | 2026-10-30 |
| CVE-2026-114530 | NA | N/A | Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versi… | 2026-10-30 |
| CVE-2026-114531 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal S… | 2026-10-30 |
| CVE-2026-114532 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal U… | 2026-10-30 |
| CVE-2026-114533 | NA | N/A | Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue af… | 2026-10-30 |
| CVE-2026-114534 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal B… | 2026-10-30 |
| CVE-2026-114535 | NA | N/A | Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Sw… | 2026-10-30 |
| CVE-2026-114536 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal U… | 2026-10-30 |
| CVE-2026-114537 | NA | N/A | Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects … | 2026-10-30 |
| CVE-2026-114538 | NA | N/A | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal B… | 2026-10-30 |