CVE-2026-118568

The Drupal Content Sync (content-sync.io) module (versions 0.0.0 to 3.2.2 ) contains an Insecure Storage of Sensitive Information vulnerability (CWE-922 ). The root cause is that the module fails to sufficiently encrypt the password of the system user used for content synchronization. This flaw c...