EUVD-2026-107825

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle AiTM. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

EUVD-2026-107824

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

CVE-2026-96375

The Drupal Cloud module (versions 0.0.0 to 7.0.1 ) is vulnerable to Improper Certificate Validation (CWE-295). The Kubernetes and VMware integrations fail to properly validate TLS certificates when connecting to remote API endpoints. This allows an Adversary in the Middle (AiTM) to intercept conn...

CVE-2026-96376

The Cloud module in Drupal (versions 0.0.0 to 7.0.1) contains an OS Command Injection vulnerability (CWE-78 ) within its Kubernetes integration . The issue stems from insufficient sanitization of user-controlled Git branch and repository URL values before they are passed to shell commands. An att...