Linux Distros Unpatched Vulnerability : CVE-2026-79290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...

CVE-2026-16646

PanKM is a Drupal contrib module affected across all versions (. ). Drupal's security team has marked the project unsupported , indicating a known security issue that the maintainer has not fixed. The vulnerability is rated Critical by Drupal, with a CVSS 3.1 base score of 5.7 (Medium) (AV:N/AC:H...

CVE-2026-16646 PanKM - Critical - Unsupported - SA-CONTRIB-2026-083

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

CVE-2026-16641 Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

CVE-2026-16641

CVE-2026-16641 affects the Drupal Commerce Elavon contrib module, with all versions (. ) impacted. The project has been marked unsupported by the Drupal security team, and the known security issue remains unaddressed by the maintainer . No specific root cause or fixed version is provided in the a...

CVE-2026-16642

Drupal Email Login OTP (a Drupal contrib module) has a critical-severity security issue affecting all versions (. ). The Drupal security team has marked the project unsupported , meaning the maintainer has not provided a fix. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) with a vector requiring...

CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

CVE-2026-16643 Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...

CVE-2026-16643

CVE-2026-16643 affects the Drupal Lunr exposed filters contrib module across all versions (*.*). The Drupal security team has marked the project as unsupported , noting that a known security issue exists within the exposed filters but has not been fixed by the maintainer. The vulnerability carrie...

CVE-2026-15088

Drupal Development Environment (a Drupal contrib module) is affected by a Critical -severity security issue across all versions (. ). The Drupal security team has marked the project as unsupported , meaning the maintainer has not provided a fix and no patched version is currently available. The C...

CVE-2026-15088 Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-18260

CVE-2026-18260 affects the Drupal Disable Login Page contrib module, with all versions impacted. The project has been marked as unsupported by the Drupal security team, and the maintainer has not provided a fix, meaning no patched release is currently available. The CVSS 3.1 score is 5.7 (Medium)...

CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-18261

Drupal Powerful Surveys module is affected across all versions (. ). The specific root cause is not detailed in the provided documents, but the issue is classified as Critical by the Drupal security team and scored CVSS 3.1: 5.7 (Medium) with high confidentiality and integrity impact but no avail...

CVE-2026-18261 Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions:...

DEBIAN-CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...