Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96366 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12,... | 2026-10-22 |
| CVE-2026-96365 | high | 7.5 | No | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform... | 2026-10-22 |
| CVE-2026-96364 | medium | 5.3 | No | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions:... | 2026-10-22 |
| CVE-2026-96362 | medium | 4.2 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96361 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96360 | low | 3.5 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96359 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96358 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96357 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This... | 2026-10-22 |
| CVE-2026-96356 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12,... | 2026-10-22 |
| CVE-2026-87954 | medium | 4.3 | No | Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary ver... | 2026-10-22 |
| CVE-2026-87953 | low | 3.3 | No | Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affect... | 2026-10-22 |
| CVE-2026-87952 | low | 3.1 | No | Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials.... | 2026-10-22 |
| CVE-2026-84913 | medium | 4.6 | No | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to... | 2026-10-22 |
| CVE-2026-84912 | medium | 4.6 | No | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intel... | 2026-10-22 |
| CVE-2026-84911 | low | 3.1 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) al... | 2026-10-22 |
| CVE-2026-84910 | medium | 4.2 | No | Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.... | 2026-10-22 |
| CVE-2026-114112 | not reported | — | No | Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based L... | 2026-10-22 |
| CVE-2026-113725 | high | 7.8 | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment n... | 2026-10-22 |
| CVE-2026-113720 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to cop... | 2026-10-22 |