CVE-2026-15088

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CVE-2026-16646

The Drupal PanKM project is marked as unsupported by the security team due to a known security issue that has not been fixed by the maintainer. Rapid7 identifies the vulnerability as Missing Authentication for Critical Function . The issue affects all versions (. ) of PanKM. Technical details reg...

CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

CVE-2026-16641

A security issue exists in Drupal Commerce Elavon (affected versions . ). The project has been marked as unsupported by the security team because a known security flaw remains unaddressed by the maintainer. While Rapid7 identifies the issue as Improper Input Validation , there is currently no inf...

CVE-2026-16642

The Drupal Email Login OTP project is affected by CVE-2026-16642 , which involves improper input validation . This project has been marked as unsupported by the security team because a known security issue remains unfixed by the maintainer. No newer version containing a fix is currently available...

CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

CVE-2026-16643 Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...

CVE-2026-16643 Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...

CVE-2026-16643

A vulnerability exists in Drupal Lunr exposed filters (all versions) due to improper input validation within the exposed filters component. The security team has marked this project as unsupported because a known security issue remains unfixed by the maintainer. There is currently no information ...

CVE-2026-15088

A vulnerability exists in Drupal Development Environment (all versions). The software has been marked as unsupported by the security team due to a known security issue that remains unfixed by the maintainer . Rapid7 identifies the root cause as Improper Input Validation . No specific remediation ...

CVE-2026-15088 Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CVE-2026-15088 Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-18260

The Drupal Disable Login Page module (versions 0.0.0 to 1.1.4 ) is vulnerable to a brute-force attack due to an improper restriction of excessive authentication attempts . The module allows users to disable access to the /user/login form unless a secret key is provided, but it fails to sufficient...

CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...