CLSA-2026-1776214337 TuxCare security update for drupal/core (11 CVEs)

🗓️ 04 Aug 2026 14:52:36Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

TuxCare updates drupal/core to fix 11 CVEs in version 9.5.11-p1+tuxcare.

Reporter	Title	Published	Views	Family All 223
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
GithubExploit	Exploit for Generation of Error Message Containing Sensitive Information in Drupal	10 Feb 202616:18	–	githubexploit
ATTACKERKB	CVE-2025-31675	31 Mar 202522:15	–	attackerkb
BDU FSTEC	The vulnerability of the /core/authorize.php file in the Drupal CMS system allows a hacker to disclose protected information.	3 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties, allowing attackers to execute arbitrary code.	11 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties. This allows attackers to delete any file they desire.	11 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties, allowing attackers to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system, related to insufficient protection of website structures, allows attackers to carry out XSS attacks.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel allows attackers to enhance their privileges.	12 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-12393	9 Dec 202423:28	–	circl

07 Aug 2026 10:02Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.3 - 9.8

EPSS0.09269

SSVC

drupal core eleven vulnerabilities tuxcare update security patch nine five eleven