CVE-2026-96392

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3...

CVE-2026-84913

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84912

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84911

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Stored XSS. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84911 AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Stored XSS. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84911

The Drupal AI (Artificial Intelligence) module is vulnerable to Stored Cross-site Scripting (XSS) due to insufficient sanitization of structured results when utilizing legacy agent setups. This issue affects versions 0.0.0 through 1.3.13 and 1.4.0 through 1.4.8 . Exploitation is mitigated by the ...

CVE-2026-84911 AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Stored XSS. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

EUVD-2026-107880

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Stored XSS. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

EUVD-2026-107879

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84912

The Drupal AI module is affected by a Missing Authorization vulnerability (CWE-862) in the AI Translate submodule. The root cause is insufficient access checks on entities, related fields, or referenced entities during the AI translation process, particularly when these components have different ...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84913

A Missing Authorization vulnerability in the Drupal AI Translate module (versions 0.0.0 to 1.3.2 and 1.4.0 to 1.4.1) allows for Forceful Browsing . The root cause is that the module fails to sufficiently verify access permissions for the entity being translated, its related fields, or referenced ...

EUVD-2026-107878

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-96392 AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3...

EUVD-2026-107814

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3...

CVE-2026-96392

The Drupal AI CKEditor module (versions 0.0.0 through 1.4.3 ) is vulnerable to Code Injection due to the improper neutralization of special elements used in a template engine. Specifically, the module fails to sufficiently mitigate Twig template injections in certain AI CKEditor rules, which allo...

CVE-2026-96392 AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3...