PT-2026-99580

TuxCare rebuilt drupal/webform multifile to address 1 CVE. Fixed in 7.1.6-p1+tuxcare...

PT-2026-99577

TuxCare rebuilt drupal/tfa basic to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...

PT-2026-99525

TuxCare rebuilt drupal/coffee to address 1 CVE. Fixed in 7.2.3-p1+tuxcare...

PT-2026-99527

TuxCare rebuilt drupal/form builder to address 1 CVE. Fixed in 7.1.22-p1+tuxcare...

PT-2026-99524

TuxCare rebuilt drupal/protected pages to address 1 CVE. Fixed in 7.2.4-p1+tuxcare...

PT-2026-99523

TuxCare rebuilt drupal/filefield paths to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...

PT-2026-99522

TuxCare rebuilt drupal/i18n to address 1 CVE. Fixed in 7.1.35-p1+tuxcare...

PT-2026-99520

TuxCare rebuilt drupal/shs to address 1 CVE. Fixed in 7.1.10-p1+tuxcare...

PT-2026-99518

TuxCare rebuilt drupal/facebook pixel to address 1 CVE. Fixed in 7.1.1-p1+tuxcare...

DRUPAL-CORE-2026-013

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

drupal-penetration-testing-lab

Drupal Penetration Testing Lab A complete penetration testing...

Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

PT-2026-99415

The Drupal project uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal. Vulnerabilities are possible if Drupal is configured to use CKEditor for WYSIWYG editing. An attacker that can create or edit content even without access to CKEditor...

Drupal 10.6.x < 10.6.17 / 11.3.x < 11.3.17 / 11.4.x < 11.4.7 Drupal Vulnerability (SA-CORE-2026-013)

According to its self-reported version, the instance of Drupal running on the remote web server is 10.6.x prior to 10.6.17, 11.3.x prior to 11.3.17, or 11.4.x prior to 11.4.7. It is, therefore, affected by a vulnerability. - The Drupal project uses the CKEditor library for WYSIWYG editing. CKEdit...

CLSA-2026-1789375926 TuxCare security update for drupal/term_reference_tree (1 CVE)

TuxCare rebuilt drupal/termreferencetree to address 1 CVE. Fixed in 7.1.11-p1+tuxcare...

PT-2026-97767

TuxCare rebuilt drupal/term reference tree to address 1 CVE. Fixed in 7.1.11-p1+tuxcare...

Exploit for SQL Injection in Drupal

Metasploitable3 — Penetration Test Report Author: Arlen F...

Exploit for Unrestricted Upload of File with Dangerous Type in Drupal

Stack/Builder Builder for stack middlewares based on HttpKern...

DRUPAL-CONTRIB-2026-152

This module adds automatic highlighting of taxonomy terms in content. The module doesn't sufficiently check access on taxonomy terms. As a result, anonymous users can view any of the site's taxonomy terms at the module's JSON endpoint, including taxonomy terms that are unpublished or otherwise...

DRUPAL-CONTRIB-2026-151

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...