Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96371 | medium | 5.4 | No | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to... | 2026-10-22 |
| CVE-2026-96370 | medium | 5.4 | No | Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0... | 2026-10-22 |
| CVE-2026-96369 | low | 3.1 | No | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Co... | 2026-10-22 |
| CVE-2026-96368 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This... | 2026-10-22 |
| CVE-2026-96367 | medium | 4.6 | No | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to... | 2026-10-22 |
| CVE-2026-96366 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12,... | 2026-10-22 |
| CVE-2026-96365 | high | 7.5 | No | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform... | 2026-10-22 |
| CVE-2026-96364 | medium | 5.3 | No | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions:... | 2026-10-22 |
| CVE-2026-96362 | medium | 4.2 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96361 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96360 | low | 3.5 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96359 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96358 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scrip... | 2026-10-22 |
| CVE-2026-96357 | medium | 4.6 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This... | 2026-10-22 |
| CVE-2026-96356 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12,... | 2026-10-22 |
| CVE-2026-87954 | medium | 4.3 | No | Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary ver... | 2026-10-22 |
| CVE-2026-87953 | low | 3.3 | No | Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affect... | 2026-10-22 |
| CVE-2026-87952 | low | 3.1 | No | Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials.... | 2026-10-22 |
| CVE-2026-84913 | medium | 4.6 | No | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to... | 2026-10-22 |
| CVE-2026-84912 | medium | 4.6 | No | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intel... | 2026-10-22 |